CVE-2025-63514

kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...

PT-2025-47369

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System affected versions not specified Description The software contains a Cross-Site Scripting XSS issue in the 'appsearch.php' file. The issue is triggered through the email parameter. This allows for the...

Inventory Management System /admin/login.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from the useremail parameter not being effectively filtered in the /admin/login.php file. No details of the vulnerability are available at this time...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management software by Pon Aravind Boominathan, an individual developer. A security vulnerability exists in Hospital Management System version v4, which stems from mishandling of the email parameter in admin-panel1.php, which may lead to SQL injection...

CVE-2024-44659

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php...

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

CVE-2024-44651

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recoveremail parameter in userpasswordrecover.php...

CVE-2024-44653

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail parameter in userlogin.php...

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

EUVD-2024-55091

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail parameter in userlogin.php...

CVE-2024-44653

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php. Multiple Connected sources corroborate a SQLi flaw stemming from unvalidated input in user_login.php, enabling potential unauthorized data access or manipulation. The attack surface is t...

PT-2025-47187

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0 Description The software is susceptible to a SQL Injection issue through the user email parameter in the user login.php file. This allows for potential unauthorized access or manipulation of data. The...

CVE-2024-44651

CVE-2024-44651 affects Kashipara Ecommerce Website 1.0. The vulnerability is a SQL Injection via the recover_email parameter in user_password_recover.php, caused by unvalidated input. Impact per the reports is potential unauthorized DB access; CVSS v3.1 base score 6.5 (Medium) with network access...

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the email and mobileno parameters of reset-password.php. An attacker can exploit this...

PT-2025-47177

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0 Description The Kashipara Ecommerce Website is susceptible to a SQL Injection issue through the recover email parameter in the user password recover.php file. This allows for potential unauthorized acces...

PT-2025-47188

Name of the Vulnerable Software and Affected Versions PHPGurukul Complaint Management System version 2.0 Description The PHPGurukul Complaint Management System version 2.0 contains a SQL Injection flaw. The issue is located in the reset-password.php file and affects the email and mobileno...

CVE-2024-44659

CVE-2024-44659 affects the PHPGurukul Online Shopping Portal 2.0. The vulnerability is a SQL Injection in the forgot-password.php script through the email parameter, due to improper input handling. This can enable arbitrary SQL execution with high impact on confidentiality, integrity, and availab...

CVE-2024-44654

CVE-2024-44654 affects PHPGurukul Complaint Management System 2.0. The vulnerability is a SQL Injection in reset-password.php via the email and mobileno parameters, due to improper validation/handling of externally supplied SQL statements. The impact stated across sources is potential unauthorize...

PT-2025-47202

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal 2.0 is susceptible to SQL Injection due to improper handling of the email parameter in the forgot-password.php script. Successful exploitation allo...