PT-2025-33481 · Unknown · Dj-Classifieds

Name of the Vulnerable Software and Affected Versions: DJ-Classifieds versions 3.9.2 through 3.10.1 Description: A SQL injection issue exists in DJ-Classifieds, allowing privileged users to execute arbitrary SQL commands. Recommendations: Update DJ-Classifieds to a version newer than 3.10.1...

PT-2025-33485 · Projectworlds · Travel Management System

Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /updatesubcategory.php. The manipulation of the...

PT-2025-33445 · Phpgurukul · Phpgurukul Online Shopping Portal Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal Project 2.0 Description: A vulnerability exists in PHPGurukul Online Shopping Portal Project 2.0, affecting unknown code within the /shopping/password-recovery.php file. Manipulation of the emailid argument c...

dormitory-management-php 安全漏洞

dormitory-management-php is a school dormitory management system by the individual developer Jayden Cai. A security vulnerability exists in dormitory-management-php version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter Account in the file login.php...

PT-2025-33442 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A vulnerability exists in itsourcecode Online Tour and Travel Management System 1.0, affecting an unknown functionality within the /admin/booking report.php file...

PT-2025-33444 · Phpgurukul · Phpgurukul Online Shopping Portal Project 2.0

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal Project 2.0 Description: A SQL injection issue exists in the file shopping/bill-ship-addresses.php. Manipulation of the billingpincode argument can lead to SQL injection. The attack can be initiated remotely,...

PT-2025-33479 · Unknown · Reel Sektör Hazine Ve Risk Yönetimi Yazılımı

Name of the Vulnerable Software and Affected Versions: Reel Sektör Hazine ve Risk Yönetimi Yazılımı versions through 1.0.0.4 Description: Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability exists in Reel Sektör Hazine ve Risk Yönetimi Yazılımı, allowi...

Online Tour and Travel Management System 1.0 SQL Injection

Online Tour and Travel Management System version 1.0 suffers from a remote SQL injection vulnerability in the /admin/operations/travellers.php endpoint...

PT-2025-33443 · Unknown · Phpgurukul Online Shopping Portal Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal Project version 2.0 Description: A SQL injection issue exists in the file /shopping/signup.php due to the manipulation of the emailid argument. This allows for remote attacks, and the exploit has been publicl...

PT-2025-33474 · Unknown · Online Medicine Guide

Name of the Vulnerable Software and Affected Versions: code-projects Online Medicine Guide version 1.0 Description: A vulnerability exists due to SQL injection. The issue is related to unknown processing of the file /adphar.php. Manipulation of the phuname argument leads to SQL injection and may ...

Joomla! SQL注入漏洞

Joomla! is a free, open source content management system from Joomla! open source. A SQL injection vulnerability exists in Joomla! versions 1.3.2 through 1.4.4. The vulnerability stems from the ability of a low-privileged user to execute arbitrary SQL commands, which can lead to SQL injection...

CVE-2025-8987

Affected product: SourceCodester COVID 19 Testing Management System 1.0. Vulnerable component: file /test-details.php; vulnerable parameter: remark. Root cause: SQL injection due to manipulation of remark, enabling remote attack. CVSS indicators in the included documents show high–critical impact...

CVE-2025-8986

A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-8984 itsourcecode Online Tour and Travel Management System expense_category.php sql injection

A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/operations/expensecategory.php. The manipulation of the argument expensename leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-8984 itsourcecode Online Tour and Travel Management System expense_category.php sql injection

A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/operations/expensecategory.php. The manipulation of the argument expensename leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-8982 itsourcecode Online Tour and Travel Management System currency.php sql injection

A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/currency.php. The manipulation of the argument currcode leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2025-8981 itsourcecode Online Tour and Travel Management System payment.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/payment.php. The manipulation of the argument paymenttype leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-55708 WordPress Quiz And Survey Master Plugin <= 10.2.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through = 10.2.4...

CVE-2025-8973 SourceCodester Cashier Queuing System Actions.php sql injection

A vulnerability has been found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the file /Actions.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

CVE-2025-8973

Summary: CVE-2025-8973 affects SourceCodester Cashier Queuing System 1.0. Affected component: the unknown function in the file /Actions.php where manipulating the Username argument leads to a SQL injection. The vulnerability appears exploitable remotely and has public disclosure. Root cause: impr...