CVE-2025-4869 itsourcecode Restaurant Management System member_update.php sql injection

A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. This affects an unknown part of the file /admin/memberupdate.php. The manipulation of the argument menu leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-4866 weibocom rill-flow Management Console code injection

A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-4843

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. This affects the function SubUPnPCSInit of the file /sbin/udev. The manipulation of the argument CameraName leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-4696

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched...

CVE-2025-4794

CVE-2025-4794 affects PHPGurukul Online Course Registration 3.1. The vulnerability is an SQL injection in the /news.php file caused by the manipulation of the newstitle parameter. It can be exploited remotely and the exploit has been publicly disclosed. Technical details in connected sources cons...

CVE-2025-4781 PHPGurukul Park Ticketing Management System forgot-password.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0. Affected is an unknown function of the file /forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4778 PHPGurukul Park Ticketing Management System normal-search.php sql injection

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /normal-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-4714

CVE-2025-4714 affects Campcodes Sales and Inventory System 1.0. The vulnerability is an SQL injection in the file /pages/reprint.php caused by manipulating the sid parameter, with remote exploitation possible. Several sources confirm impact and disclosure status, noting the issue is critical. No ...

CVE-2025-4706

Affected software : ProjectWorlds Online Examination System 1.0. The vulnerability affects the file /Procedure3b_yearwiseVisit.php and is triggered by manipulating the Visit_year parameter. Root cause / vulnerability type : SQL injection due to improper handling of input in the affected PHP code....

CVE-2025-4704

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...

CVE-2025-4505

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /category.php. The manipulation of the argument categoryname leads to sql injection. The attack can be launche...

CVE-2025-4545 CTCMS Content Management System File Tpl.php del path traversal

A vulnerability was found in CTCMS Content Management System 2.1.2. It has been classified as critical. Affected is the function del of the file ctcms\apps\controllers\admin\Tpl.php of the component File Handler. The manipulation of the argument File leads to path traversal. It is possible to...

CVE-2025-4464

A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=saveplan. The manipulation of the argument plan leads to sql injection. The attack can be launched remotely...

CVE-2025-4505

The CVE-2025-4505 entry concerns PHPGurukul Apartment Visitors Management System v1.0. The vulnerability is in the /category.php functionality, where manipulating the categoryname argument triggers an SQL injection. Exploitation is possible remotely, and multiple sources note that the exploit has...

CVE-2025-4504

CVE-2025-4504 affects SourceCodester Online College Library System 1.0. The vulnerability is in the file /index.php where the Category argument is manipulated to trigger a SQL injection. This can be exploited remotely and the exploit has been disclosed publicly. Multiple connected sources corrobo...

CVE-2025-4497

A vulnerability was found in code-projects Simple Banking System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the component Sign In. The manipulation of the argument password2 leads to buffer overflow. Attacking locally is a requirement. The exploit has...

CVE-2025-4480

CVE-2025-4480 affects code-projects’ Simple College Management System 1.0. The vulnerability lies in the Add New Student input handling, where manipulating the name/branch argument triggers a stack-based buffer overflow. This enables a local-host attack with the exploit publicly disclosed. The is...

CVE-2025-4472

A vulnerability was found in code-projects Departmental Store Management System 1.0. It has been classified as critical. Affected is the function bill. The manipulation of the argument Item Code leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The explo...

CVE-2025-4463 itsourcecode Gym Management System ajax.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an unknown function of the file /ajax.php?action=savepackage. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2025-4266

A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-reports-details.php?vid=2. The manipulation of the argument fromdate/tomdate leads to sql injection. The attack may be...