CVE-2025-13278

CVE-2025-13278 affects projectworlds Advanced Library Management System 1.0. The vulnerability is in the file /borrowed_book_search.php where manipulating the datefrom/dateto parameters enables SQL injection. The attack can be launched remotely, and exploit details have been publicly disclosed. R...

CVE-2025-9501

creationtimestamp| type| source ---|---|--- 2025-11-17 07:20:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5sorqwsrf2n 2025-11-17 07:51:21+00:00| seen| https://gist.github.com/Darkcrai86/f1e138bd535c7091a2a2ae380b6a4604 2025-11-18 02:19:51+00:00| seen|...

CVE-2025-13262

creationtimestamp| type| source ---|---|--- 2025-11-17 07:16:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5sok3f5v42a...

CVE-2025-13266

creationtimestamp| type| source ---|---|--- 2025-11-17 07:09:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5so5fh7bp2k...

CVE-2025-13284

creationtimestamp| type| source ---|---|--- 2025-11-17 05:54:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5sjx6xqp32s 2025-11-17 14:10:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m5tfnrdq5o2h...

CVE-2025-13282

creationtimestamp| type| source ---|---|--- 2025-11-17 05:49:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5sjoakjp62w 2025-11-17 06:02:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/115563518308532122...

CVE-2025-13252

creationtimestamp| type| source ---|---|--- 2025-11-17 03:09:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5sapwmjch2b...

CVE-2025-40208

creationtimestamp| type| source ---|---|--- 2025-11-17 00:26:21+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3m5rxmpad2k2h 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

PT-2025-47196

Name of the Vulnerable Software and Affected Versions PHPGurukul Complaint Management System version 2.0 Description The software is susceptible to a Cross Site Scripting XSS issue. This flaw is located in the between-date-userreport.php script and affects the fromdate and todate parameters...

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the fromdate and todate parameters in between-date-userreport.php. An attacker can...

CVE-2024-46335

PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting XSS via the fromdate and todate parameters in between-date-userreport.php...

CVE-2024-46335

PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting XSS via the fromdate and todate parameters in between-date-userreport.php...

CVE-2024-44657

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

CVE-2024-46335

PHPGurukul Complaint Management System 2.0 is vulnerable to Cross-Site Scripting (XSS) in the between-date-userreport.php script, via the fromdate and todate parameters. The root cause, as described across multiple reports, is lack of proper filtering/escaping of user-supplied data, enabling inje...

PT-2025-47193

Name of the Vulnerable Software and Affected Versions Freebox v5 HD version 1.7.20 Freebox v5 Crystal version 1.7.20 Freebox v6 Révolution r1–r3 versions 4.7.x Freebox Mini 4K versions 4.7.x Freebox One versions 4.7.x Description Freebox devices expose subscribers' IMSI identifiers in plaintext...

CVE-2024-44657

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

EUVD-2024-55096

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

Projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter datefrom/dateto in the...

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the fromdate and todate parameters in between-date-userreport.php, whic...

CVE-2024-44657

PHPGurukul Complaint Management System 2.0 is affected by a SQL Injection vulnerability in the between-date-userreport.php file, caused by lack of validation for the fromdate and todate parameters. The root cause is unsanitized input that can allow unauthorized SQL execution and data access/modif...