Frappe Technologies Frappe SQL注入漏洞

Frappe Technologies Frappe is a Python, Mariadb-based and integrated front-end page web development framework from Frappe Technologies, India. A security vulnerability exists in Frappe Technologies Frappe version 15.74.2 and versions prior to 14.96.15, which stems from a specially crafted request...

Visitor Management System query_data.php File SQL Injection Vulnerability

Visitor Management System is a visitor access management system. Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter dateF/dateP in the file /querydata.php. An attacker can exploit...

PT-2025-34013 · WordPress · Miniorange Custom Api For Wp

Name of the Vulnerable Software and Affected Versions: miniOrange Custom API for WP versions through 4.2.2 Description: The software contains an improper neutralization of special elements used in an SQL command, leading to a SQL injection issue. This allows for SQL injection attacks...

WellChoose Organization Portal System SQL Injection Vulnerability

WellChoose Organization Portal System is an electronic directory service system from WellChoose in Taiwan, China. The WellChoose Organization Portal System suffers from a SQL injection vulnerability that arises from the application's lack of validation of externally entered SQL statements. The...

Swatadru Exam-Seating-Arrangement 安全漏洞

Swatadru Exam-Seating-Arrangement is an exam seat reservation system by the individual developer Swatadru Paul. A security vulnerability exists in Swatadru Exam-Seating-Arrangement, which stems from a SQL injection attack due to incorrect manipulation of the parameter email in the file /student.p...

PT-2025-34142

Name of the Vulnerable Software and Affected Versions: Swatadru Exam-Seating-Arrangement up to 97335ccebf95468d92525f4255a2241d2b0b002f Description: A vulnerability exists in Swatadru Exam-Seating-Arrangement. Manipulation of the email argument in the /student.php file within the Student Login...

Job Diary edit-details.php file SQL Injection Vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /edit-details.php. An attacker can exploit this vulnerability to execute illegal SQL commands to stea...

Hospital Management System edit-doctor.php file SQL Injection Vulnerability

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter docfees in the file /admin/edit-doctor.php. An...

CVE-2025-9156

A vulnerability was found in itsourcecode Sports Management System 1.0. The affected element is an unknown function of the file /Admin/sports.php. Performing manipulation of the argument code results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public...

CVE-2025-9155

CVE-2025-9155 affects the itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is in the file /user/forget_password.php where manipulation of the email parameter leads to a SQL injection. The issue is exploitable remotely and the exploit has been disclosed to the public. R...

CVE-2025-9155 itsourcecode Online Tour and Travel Management System forget_password.php sql injection

A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Impacted is an unknown function of the file /user/forgetpassword.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to...

CVE-2025-9150 Surbowl dormitory-management-php violation_add.php sql injection

A vulnerability was identified in Surbowl dormitory-management-php up to 9f1d9d1f528cabffc66fda3652c56ff327fda317. Affected is an unknown function of the file /admin/violationadd.php?id=2. Such manipulation of the argument ID leads to sql injection. The attack may be performed from a remote...

CVE-2025-9148 CodePhiliaX Chat2DB JDBC Connection DataSourceController.java sql injection

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. The attack can be executed...

CVE-2025-9148

CVE-2025-9148 affects CodePhiliaX Chat2DB up to 0.3.7, specifically the JDBC Connection Handler’s DataSourceController.java. The vulnerability is a SQL injection in an unknown function of that file, enabling remote exploitation. Public exploits have been disclosed. Multiple sources corroborate re...

CVE-2025-9140

Lingdang CRM up to version 8.6.4.7 is affected by an SQL injection in /crm/crmapi/erp/tabdetail_moduleSave.php via the getvaluestring parameter. Remote exploitation is possible and PoCs/exploits exist publicly (including time-based blind and boolean-based payloads). Vendor advisory indicates the ...

Exploit for CVE-2025-55444

CVE Reports by Anudeep Kadambala This repository contains det...

CVE-2025-51510

MoonShine was discovered to contain a SQL injection vulnerability under the Blog - Categories page when using the moonshine-tree-resource version 2.0.2 component...

PT-2025-33858 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection issue exists in the /user/forget password.php file due to manipulation of the email argument. This manipulation occurs within an unknown function...

PT-2025-33730 · Unknown · Saurus Cms Community Edition

Name of the Vulnerable Software and Affected Versions: Saurus CMS Community Edition version 4.7.1 Description: Saurus CMS Community Edition 4.7.1 contains an issue in the custom DB::prepare function. The function utilizes preg replace with the deprecated /e eval modifier for SQL query parameter...

TalentNeuron Suite 安全漏洞

TalentNeuron Suite is a comprehensive platform for talent layout by TalentNeuron USA. A security vulnerability exists in TalentNeuron Suite version 0.4.3, which stems from a parameter injection and could lead to an SQL injection attack...