CVE-2026-114264

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file editmember.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote...

CVE-2026-114264

The ProjectWorlds Advanced Library Management System 1.0 is vulnerable to a SQL injection flaw within an unknown function in the edit_member.php file. Attackers can manipulate the firstname , middlename , lastname , address , branch , or type arguments to execute the injection. Remote exploitatio...

CVE-2026-114264 ProjectWorlds Advanced Library Management System edit_member.php sql injection

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file editmember.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote...

EUVD-2026-107415

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file editmember.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote...

CVE-2026-114264 ProjectWorlds Advanced Library Management System edit_member.php sql injection

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file editmember.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote...

Projectworlds Advanced Library Management System input validation error vulnerability

Version 1.0 of the Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the firstname/middlename/lastname/address/branch/type parameters in the file editmember.php, potentially leading to SQL injection...

Advanced-Library-Management-System-Project-in-PHP-with-Barcode-edit_member.php

Advanced-Library-Management-System-Project-in-PHP-with-Barcode...

CVE-2025-69936: Improper Neutralization of Special Elements used in an SQL Command

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...

CVE-2025-10604: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/editmember.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

CVE-2024-46236

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the address parameter in addmembers.php and editmember.php...

CVE-2025-0541 Codezips Gym Management System edit_member.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/editmember.php. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-0541: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/editmember.php. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-46236: Improper Neutralization of Input During Web Page Generation

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the address parameter in addmembers.php and editmember.php...

CVE-2024-40482: Improper Neutralization of Input During Web Page Generation

An Unrestricted file upload vulnerability was found in "/Membership/editmember.php" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file...

WordPress Mail Masta plugin SQL injection vulnerability (CNVD-2017-02635)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Mail Masta aka mail-masta is one of the email plug-ins. WordPress Mail Masta plugin version 1.0 in...

CVE-2017-6574: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: filterlist...

CVE-2017-6575: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...

CVE-2007-0402

CVE-2007-0402 describes a cross-site scripting (XSS) vulnerability in the Admin module: admin/edit_member.php of Easebay Resources Paypal Subscription Manager. The issue allows remote attackers to inject arbitrary web script or HTML through the username parameter. The vulnerability is documented ...

CVE-2007-0402: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin/editmember.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter...