EUVD-2025-197888

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

EUVD-2025-197901

A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.php. This manipulation of the argument Consignment causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-13303 code-projects Courier Management System search-edit.php sql injection

A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.php. This manipulation of the argument Consignment causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-13303 code-projects Courier Management System search-edit.php sql injection

A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.php. This manipulation of the argument Consignment causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-13303

The CVE-2025-13303 entry concerns code-projects’ Courier Management System 1.0. Affected component: the file /search-edit.php, where manipulation of the Consignment parameter leads to SQL injection. Exploitation can be remote; multiple sources state the exploit has been publicly disclosed. No ven...

PT-2025-47211

Name of the Vulnerable Software and Affected Versions Courier Management System version 1.0 Description A SQL injection issue exists in the file /search-edit.php due to manipulation of the Consignment argument. This manipulation can be initiated remotely. The exploit has been publicly disclosed...

CVE-2025-11440

JhumanJ OpnForm up to version 1.9.3 is affected by a vulnerability in an unknown function at the /edit endpoint that can lead to improper access controls. The issue is exploitable remotely and has publicly disclosed exploits. A patch is available: b15e29021d326be127193a5dbbd528c4e37e6324. Apply t...

EUVD-2018-10513

Malware in sbrugna...

CVE-2025-11111 Campcodes Advanced Online Voting Management System candidates_edit.php sql injection

A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/candidatesedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to...

CVE-2025-10830

CVE-2025-10830 affects Campcodes Computer Sales and Inventory System 1.0. The vulnerability is in the /pages/inv_edit1.php handling of the idd parameter, where manipulation can cause a SQL injection. It is described as exploitable remotely and with a published exploit. Connected documents corrobo...

CVE-2025-10435

A security flaw has been discovered in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been...

CVE-2025-10367 MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting

A vulnerability has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown functionality of the file /htdocs/cardEdit.php. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public...

CVE-2025-9772

A vulnerability was detected in RemoteClinic up to 2.0. This affects an unknown part of the file /staff/edit.php. Performing manipulation of the argument image results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used. This vulnerability only...

CVE-2025-9679

A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown function of the file /courseedit1.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

expressCart 安全漏洞

expressCart is a shopping cart software by Mark Moffat Individual Developer. A security vulnerability exists in expressCart that stems from an injection attack due to a misuse of the file /admin/product/edit/...

CVE-2025-9706

CVE-2025-9706 affects SourceCodester Water Billing System 1.0. The vulnerability is in an unknown function of the file /edit.php where manipulation of the parameter ID leads to SQL injection . It can be exploited remotely and the exploit has been publicly disclosed. Connected documents confirm mu...

SourceCodester Water Billing System 安全漏洞

SourceCodester Water Billing System is an open source water billing system from SourceCodester. A security vulnerability exists in SourceCodester Water Billing System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter ID in the file /edit.php...

PT-2025-35382

Name of the Vulnerable Software and Affected Versions: SourceCodester Water Billing System version 1.0 Description: A security issue exists in SourceCodester Water Billing System 1.0. The vulnerability is related to SQL injection within an unknown functionality of the file /edit.php. Manipulation...

CVE-2025-9144

A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisheredit.shtm. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be...

CVE-2025-9233 Scada-LTS view_edit.shtm cross site scripting

A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file viewedit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...