CVE-2025-4697: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-directory.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...

CVE-2025-45021: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit this vulnerability via the email parameter in a POST request to execute arbitrary SQL commands...

CVE-2025-45021

A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit this vulnerability via the email parameter in a POST request to execute arbitrary SQL commands...

CVE-2024-5136: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in PHPGurukul Directory Management System 1.0. Affected is an unknown function of the file /admin/search-directory.php.. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

Directory Management System SQL Injection Vulnerability

Directory Management System is a directory management system. A SQL injection vulnerability exists in Directory Management System v1.0, which stems from a lack of validation of the fullname parameter in add-directory.php against an externally-entered SQL statement. An attacker can exploit this...

CVE-2022-31384

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php...

CVE-2022-31383

Directory Management System v1.0 is affected by a SQL injection vulnerability triggered via the editid parameter in view-directory.php. The issue is consistently described across multiple sources as an SQL injection originating from the editid input, enabling arbitrary SQL execution. The CVE-2022...

CVE-2022-31384

CVE-2022-31384 affects Directory Management System v1.0, with a SQL injection vulnerability in add-directory.php exploitable via the fullname parameter due to insufficient input validation. Affected component is the add-directory.php endpoint; the issue enables arbitrary SQL execution and potenti...

CVE-2022-31383: Improper Neutralization of Special Elements used in an SQL Command

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php...

CVE-2022-31384: Improper Neutralization of Special Elements used in an SQL Command

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php...

ogero.gov.lb XSS vulnerability

Open Bug Bounty ID: OBB-612604 Description| Value ---|--- Affected Website:| ogero.gov.lb Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7193

Cross-site scripting XSS vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter...

CVE-2018-7193

Cross-site scripting XSS vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter...

CVE-2018-7193: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter...

PT-2018-17939

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.10.2 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the order parameter in the "/scp/directory.php" API endpoint...

keighley.gov.uk XSS vulnerability

Open Bug Bounty ID: OBB-552513 Description| Value ---|--- Affected Website:| keighley.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

keighley.gov.uk XSS vulnerability

Open Bug Bounty ID: OBB-519684 Description| Value ---|--- Affected Website:| keighley.gov.uk Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

skylinecollege.edu XSS vulnerability

Vulnerable URL: http://skylinecollege.edu/search/directory.php?keyword=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 234524 VIP website status:| No Coordinated Disclosure...

townplan.gov.my XSS vulnerability

Vulnerable URL: http://www.townplan.gov.my/directory.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 390293 VIP website status:| No Coordinated Disclosure Timeline: Description|...

rcm.k0jpr.net XSS vulnerability

Vulnerable URL: http://rcm.k0jpr.net/directory.php?S=KS" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check rcm.k0jpr.net SSL...