CVE-2025-4758

The CVE-2025-4758 entry affects PHPGurukul Beauty Parlour Management System 1.1, where an unknown function in /contact.php allows manipulation of the fname parameter to trigger SQL injection. This can be exploited remotely and exploits have been disclosed publicly. Other parameters may be affecte...

CVE-2025-4758: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected is an unknown function of the file /contact.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-33770

Real Estate Management System v1.0 was discovered to contain a SQL injection vulnerability via the message parameter at /contact.php...

CVE-2023-33770

Real Estate Management System v1.0 was discovered to contain a SQL injection vulnerability via the message parameter at /contact.php...

CVE-2023-33770: Improper Neutralization of Special Elements used in an SQL Command

Real Estate Management System v1.0 was discovered to contain a SQL injection vulnerability via the message parameter at /contact.php...

CVE-2023-33770

The Real Estate Management System v1.0 contains a SQL injection vulnerability caused by improper handling of the message parameter at the /contact.php API endpoint. An attacker could exploit this flaw to execute unintended SQL commands. As a temporary workaround, it is recommended to restrict acc...

CVE-2023-33770

Real Estate Management System v1.0 was discovered to contain a SQL injection vulnerability via the message parameter at /contact.php...

CVE-2025-4020 PHPGurukul Old Age Home Management System contact.php sql injection

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /contact.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-4020 PHPGurukul Old Age Home Management System contact.php sql injection

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /contact.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-4020

CVE-2025-4020 affects PHPGurukul Old Age Home Management System 1.0. The vulnerability is a SQL injection in the unknown functionality of /contact.php triggered by manipulating the fname parameter. It is exploitable remotely, with public exploit disclosure noted in the sources. Multiple CVSS vect...

CVE-2025-4020: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /contact.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely. The exploit has...

PT-2025-18067 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical issue affects an unknown functionality of the file /contact.php. The manipulation of the argument fname leads to SQL injection. The attack may be launched remotely...

CVE-2025-29410: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component /contact.php of Hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the txtEmail parameter...

PT-2025-12349

Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0 Description A cross-site scripting XSS issue in the /contact.php component allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the txtEmail parameter. This enable...

CVE-2025-1168 SourceCodester Contact Manager with Export to VCF delete-contact.php sql injection

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

CVE-2025-1168 SourceCodester Contact Manager with Export to VCF delete-contact.php sql injection

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

CVE-2025-1168

CVE-2025-1168 affects SourceCodester Contact Manager with Export to VCF 1.0. The vulnerability resides in /endpoint/delete-contact.php where manipulating the contact argument leads to SQL injection. Impact is described as remote, with high confidentiality/integrity/availability implications in mu...

PT-2025-6142

Name of the Vulnerable Software and Affected Versions: SourceCodester Contact Manager with Export to VCF version 1.0 Description: A critical issue has been found in the SourceCodester Contact Manager with Export to VCF. The problem affects the /endpoint/delete-contact.php file, where the...

CVE-2025-1168: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

CVE-2024-13007 Codezips Event Management System contact.php sql injection

A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...