28 matches found
CVE-2026-13531 itsourcecode Hospital Management System department.php sql injection
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /department.php. The manipulation of the argument editid results in sql injection. The attack may be performed from remote. The exploit has been released to the public a...
CVE-2026-13531: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /department.php. The manipulation of the argument editid results in sql injection. The attack may be performed from remote. The exploit has been released to the public a...
EUVD-2022-30159
Malicious code in bioql PyPI...
CVE-2025-10809
CVE-2025-10809 affects Campcodes Online Learning Management System 1.0. The vulnerability is an SQL injection in the /admin/department.php file caused by manipulating the unknown function argument d . The issue is exploitable remotely, and the exploit has been publicly disclosed. Public records d...
CVE-2025-10809: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/department.php. Such manipulation of the argument d leads to sql injection. The attack can be executed remotely. The exploit has been...
CVE-2025-57117: Improper Neutralization of Input During Web Page Generation
A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting a malicious payload into the Department Name field under Add Department...
CVE-2025-4772: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/department.php. The manipulation of the argument department leads to sql injection. The attack can be launched...
Company Visitor Management System /department.php File SQL Injection Vulnerability
Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter departmentname in the file /department.php. An attacke...
CVE-2025-4361 PHPGurukul Company Visitor Management System department.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. This affects an unknown part of the file /department.php. The manipulation of the argument departmentname leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2025-4361
The CVE-2025-4361 entry concerns PHPGurukul Company Visitor Management System 2.0. A SQL injection vulnerability exists in the /department.php file via the departmentname parameter, enabling remote exploitation. Multiple connected sources corroborate the issue and describe a lack of input validat...
CVE-2025-4361: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. This affects an unknown part of the file /department.php. The manipulation of the argument departmentname leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2025-29431: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/department.php via the id, code, and name parameters...
PT-2025-11521
Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/department.php endpoint via the id, code, and name parameters. This allows for potential malicious script...
CVE-2025-1591 SourceCodester Employee Management System Department Page department.php cross site scripting
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...
CVE-2025-1591: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...
CVE-2024-12485: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
CVE-2024-12485 code-projects Online Class and Exam Scheduling System department.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
CVE-2024-50838: Buffer Copy without Checking Size of Input
A Stored Cross-Site Scripting XSS vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the d and pi parameters...
CMSctweb Creative 1.0 Cross Site Scripting
==================================================================================================================================== | Title : CMSctweb creative v 1.0 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 68.032-bit | | Vend...
