CVE-2025-4928

CVE-2025-4928 concerns the Projectworlds Online Lawyer Management System v1.0. Multiple connected sources confirm a SQL injection in the unknown-code path /save_lawyer_edit_profile.php that can be exploited remotely and with public disclosure. The evidence consistently states the issue is critica...

CVE-2025-4910

A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file /admin/edit-animal-details.php. The manipulation of the argument aname leads to sql injection. The attack may be initiated remotely. Th...

CVE-2025-4910 PHPGurukul Zoo Management System edit-animal-details.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file /admin/edit-animal-details.php. The manipulation of the argument aname leads to sql injection. The attack may be initiated remotely. Th...

CVE-2025-4910 PHPGurukul Zoo Management System edit-animal-details.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file /admin/edit-animal-details.php. The manipulation of the argument aname leads to sql injection. The attack may be initiated remotely. Th...

Fuji Electric V-SFT 缓冲区错误漏洞

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates from the failure of the ConvMacroData function in VS6EditData to properly validate the length of input data, which can be exploited by ...

PHPGurukul User Registration & Login and User Management System 注入漏洞

PHPGurukul User Registration & Login and User Management System is a user registration & login and user management system from PHPGurukul. An injection vulnerability exists in PHPGurukul User Registration & Login and User Management System version 3.3, which originates from an SQL injection due t...

Projectworlds Online Lawyer Management System 注入漏洞

Projectworlds Online Lawyer Management System is an online lawyer management system from Projectworlds India. An injection vulnerability exists in Projectworlds Online Lawyer Management System version 1.0, which originates from an operation in the file /savelawyereditprofile.php that results in S...

PHPGurukul Zoo Management System 安全漏洞

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter aname in the file /admin/edit-animal-details.php. An attacker can exploit this...

CVE-2025-4813

A vulnerability, which was classified as critical, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the...

CVE-2025-4793

A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been classified as critical. Affected is an unknown function of the file /edit-student-profile.php. The manipulation of the argument cgpa leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-4744

A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affected by this issue is some unknown functionality of the file dashboard\editemployee.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross...

CVE-2025-4744 code-projects Employee Record System edit_employee.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affected by this issue is some unknown functionality of the file dashboard\editemployee.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross...

PHPGurukul Online Course Registration 注入漏洞

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cgpa in the file /edit-student-profile.php. An attacker can...

CVE-2025-4722

A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /editprofile.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4704

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...

CVE-2025-4704 PHPGurukul Vehicle Parking Management System edit-category.php sql injection

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...

CVE-2025-4704

CVE-2025-4704 affects PHPGurukul Vehicle Parking Management System 1.13. A SQL injection vulnerability exists in the file /admin/edit-category.php through manipulation of the editid parameter, enabling remote exploitation. Multiple sources confirm an injection flaw and public disclosures. No offi...

CVE-2025-44182

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS via the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, enginenumber' in the /admin/edit-vehicle.php component. This allows attackers to execute arbitrary code...

CVE-2025-44180

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /edit-brand.php?bid=brandId...

CVE-2025-4697

A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-directory.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...