CVE-2025-69936: Improper Neutralization of Special Elements used in an SQL Command

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...

CVE-2025-10604: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/editmember.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

CVE-2024-46236

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the address parameter in addmembers.php and editmember.php...

CVE-2025-0541 Codezips Gym Management System edit_member.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/editmember.php. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-0541: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/editmember.php. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-46236: Improper Neutralization of Input During Web Page Generation

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the address parameter in addmembers.php and editmember.php...

CVE-2024-40482: Improper Neutralization of Input During Web Page Generation

An Unrestricted file upload vulnerability was found in "/Membership/editmember.php" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file...

WordPress Mail Masta plugin SQL injection vulnerability (CNVD-2017-02635)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Mail Masta aka mail-masta is one of the email plug-ins. WordPress Mail Masta plugin version 1.0 in...

CVE-2017-6575: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...

CVE-2017-6574: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: filterlist...

CVE-2007-0402

CVE-2007-0402 describes a cross-site scripting (XSS) vulnerability in the Admin module: admin/edit_member.php of Easebay Resources Paypal Subscription Manager. The issue allows remote attackers to inject arbitrary web script or HTML through the username parameter. The vulnerability is documented ...

CVE-2007-0402: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin/editmember.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter...