CVE-2025-7588: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This affects an unknown part of the file edit-product.php. The manipulation of the argument productname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

PT-2025-29441 · Phpgurukul · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical issue exists in PHPGurukul Dairy Farm Shop Management System 1.3. The productname argument within the edit-product.php file is susceptible to SQL injection. This...

CVE-2025-3764: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /edit-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be initiated remotely. T...

CVE-2025-3697: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

PT-2024-31933

Name of the Vulnerable Software and Affected Versions PHPGurukul Dairy Farm Shop Management System version 1.1 Description The issue is a Cross-Site Scripting XSS vulnerability. This vulnerability is exploited through the pname parameter in the "add product.php" and "edit product.php" files...