18 matches found
CVE-2025-8240 code-projects Exam Form Submission dashboard.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /user/dashboard.php. The manipulation of the argument phone leads to sql injection. The attack may be launched remotely. Th...
CVE-2025-6096
A vulnerability has been found in codesiddhant Jasmin Ransomware up to 1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard.php. The manipulation of the argument Search leads to sql injection. The attack can be launched remotely. The...
CVE-2025-6096
The CVE-2025-6096 entry concerns codesiddhant Jasmin Ransomware up to version 1.0.1. The vulnerability affects an unknown function in /dashboard.php where manipulating the Search argument leads to SQL injection. It is exploitable remotely, and publicly disclosed exploits exist. Connected document...
CVE-2025-6096 codesiddhant Jasmin Ransomware dashboard.php sql injection
A vulnerability has been found in codesiddhant Jasmin Ransomware up to 1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard.php. The manipulation of the argument Search leads to sql injection. The attack can be launched remotely. The...
CVE-2025-6096 codesiddhant Jasmin Ransomware dashboard.php sql injection
A vulnerability has been found in codesiddhant Jasmin Ransomware up to 1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard.php. The manipulation of the argument Search leads to sql injection. The attack can be launched remotely. The...
PT-2025-25493
Name of the Vulnerable Software and Affected Versions codesiddhant Jasmin Ransomware versions up to 1.0.1 Description A critical vulnerability has been found in codesiddhant Jasmin Ransomware, affecting an unknown functionality of the file /dashboard.php. The manipulation of the Search argument...
PHPGurukul e-Diary Management System 注入漏洞
The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Category of the dashboard.php file. An attacker can...
CVE-2024-57687
An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter...
GYM Management System 1.0 Insecure Settings
==================================================================================================================================== | Title : GYM Management System 1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64...
PT-2024-29324 · Unknown · Kashipara Responsive School Management System
Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: An issue was found in the /smsa/admin dashboard.php endpoint, allowing remote unauthenticated attackers to view the administrator dashboard due to incorrect access...
CVE-2022-41446
CVE-2022-41446 is an access control vulnerability in Record Management System using CodeIgniter v1.0. The issue resides in /Admin/dashboard.php, enabling attackers to access and modify user data due to improper access control. Affects CodeIgniter-based Teachers/Record Management System v1.0; CVSS...
PT-2020-14433 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version cwp-e17.0.9.8.923 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the ajax...
PT-2020-14531 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version cwp-e17.0.9.8.923 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the ajax dashboard.ph...
CVE-2019-19112
The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php...
CVE-2019-19112
The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php...
serplab.co.uk Cross Site Request Forgery vulnerability
Open Bug Bounty ID: OBB-579215 Description| Value ---|--- Affected Website:| serplab.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| CSRF Cross-Site Request Forgery / CWE-352 CVSSv3 Score:| 8.8...
MC Inventory Manager Script - Multiple Vulnerabilities
Exploit for php platform in category web applications Vulnerability: Admin Login Bypass & SQLi Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Inventory Manager Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885 Author: İhsan Şencan Author Web:...
Ushahidi 2.0.1 (range param) SQL Injection Vulnerability (post-auth)
Exploit for php platform in category web applications Ushahidi 2.0.1 range param SQL Injection Vulnerability post-auth Vendor: Ushahidi, Inc. Product web page: http://www.ushahidi.com Affected version: 2.0.1 Tunis Summary: The Ushahidi Platform is a platform for information collection,...