CVE-2025-4264

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/edit-ambulance.php. The manipulation of the argument dconnum leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4262

A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/user-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely...

CVE-2025-4359

CVE-2025-4359 affects itsourcecode Gym Management System 1.0. The /ajax.php?action=delete_member endpoint is vulnerable to SQL injection via the ID parameter, enabling remote abuse. Exploit public; impact listed as high for confidentiality, integrity, and availability. No patch/details on remedia...

CVE-2025-4352 Brilliance Golden Link Secondary System tcEntrFlowSelect.htm sql injection

A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the argument custTradeId leads to sql injection. The attac...

CVE-2025-4250

A vulnerability was found in code-projects Nero Social Networking Site 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument fname/lname/login/password2/cpassword/address/cnumber/email/gender/propic/month leads to sql...

CVE-2025-4341 D-Link DIR-880L Request Header ssdpcgi sub_16570 command injection

A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTPST/REMOTEADDR/REMOTEPORT/SERVERID leads to command...

CVE-2025-4305 kefaming mayi File.php upload unrestricted upload

A vulnerability has been found in kefaming mayi up to 1.3.9 and classified as critical. This vulnerability affects the function Upload of the file app/tools/controller/File.php. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit h...

CVE-2025-4299

CVE-2025-4299 affects Tenda AC1206 up to version 15.03.06.23. The vulnerability resides in the setSchedWifi function in /goform/openSchedWifi and is caused by a buffer overflow when manipulated, enabling a remote attacker to trigger exploitation. Multiple sources corroborate the issue as a high/s...

CVE-2025-4197

A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /editxpatient.php. The manipulation of the argument lastname leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2025-4175 AlanBinu007 Spring-Boot-Advanced-Projects Upload Profile API Endpoint UserProfileController.java uploadUserProfileImage path traversal

A vulnerability, which was classified as critical, was found in AlanBinu007 Spring-Boot-Advanced-Projects up to 3.1.3. This affects the function uploadUserProfileImage of the file...

CVE-2025-4174 PHPGurukul COVID19 Testing Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely...

CVE-2025-4113

The CVE-2025-4113 entry concerns PHPGurukul Curfew e-Pass Management System v1.0. The vulnerability is in the /admin/edit-pass-detail.php endpoint, where the editid parameter is used in a way that enables SQL injection. Multiple connected sources confirm a remote-exploit path with potential to ac...

CVE-2025-4112

CVE-2025-4112 affects PHPGurukul Student Record System v3.20. The issue is a SQL injection in the add-course.php file caused by manipulating the course-short parameter. Impact is potential unauthorized data access/steal from the database; exploitation is described as remote. Multiple connected so...

CVE-2025-4109

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-subadmin.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launch...

CVE-2025-4109 PHPGurukul Pre-School Enrollment System edit-subadmin.php sql injection

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-subadmin.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launch...

CVE-2025-4074

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/pass-bwdates-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack...

CVE-2025-4070

The CVE-2025-4070 entry concerns PHPGurukul Rail Pass Management System 1.0. A SQL injection vulnerability exists in the /admin/changeimage.php endpoint, triggered by the editid parameter. The root cause is lack of input validation on editid, enabling arbitrary SQL execution. Exploitation is desc...

CVE-2025-4068 code-projects Simple Movie Ticket Booking System changeprize stack-based overflow

A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by this vulnerability is the function changeprize. The manipulation of the argument prize leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit...

CVE-2025-4067

A vulnerability classified as critical has been found in ScriptAndTools Online-Travling-System 1.0. Affected is an unknown function of the file /admin/viewpackage.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed ...

CVE-2025-4027

CVE-2025-4027 affects PHPGurukul Old Age Home Management System 1.0. The vulnerability is a SQL injection in an unknown function of /admin/rules.php caused by manipulation of the pagetitle argument. It can be exploited remotely, and the exploit has been disclosed publicly. The primary sources des...