Lucene search
+L

5 matches found

CNVD
CNVD
•added 2025/05/20 12:00 a.m.•15 views

Directory Management System /admin/edit-directory.php File SQL Injection Vulnerability

Directory Management System is a directory management system. Directory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter editid in the file /admin/edit-directory.php. An attacker can...

9.8CVSS8.3AI score0.00514EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/05/15 1:00 p.m.•33 views

CVE-2025-4697 PHPGurukul Directory Management System edit-directory.php sql injection

A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-directory.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...

7.5CVSS0.00514EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•4 views

CVE-2025-4697: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-directory.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...

9.8CVSS7AI score0.00514EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/04/30 12:00 a.m.•10 views

CVE-2025-45021

A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit this vulnerability via the email parameter in a POST request to execute arbitrary SQL commands...

8.4AI score0.00224EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/30 12:00 a.m.•0 views

CVE-2025-45021: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit this vulnerability via the email parameter in a POST request to execute arbitrary SQL commands...

5.3CVSS6.2AI score0.00224EPSS
SaveExploits1References1
Rows per page
Query Builder