CVE-2025-12325 SourceCodester Best Salon Management System forgot-password.php sql injection

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

CVE-2025-12325 SourceCodester Best Salon Management System forgot-password.php sql injection

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

CVE-2025-12277 Abdullah-Hasan-Sajjad Online-School studentLogin.php sql injection

A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has...

EUVD-2025-36175

A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2025-12277

CVE-2025-12277 affects Abdullah-Hasan-Sajjad Online-School. The vulnerability is a SQL injection in /studentLogin.php caused by improper handling of the Email parameter, allowing remote exploitation. Affected versions are prior to f09dda77b4c29aa083ff57f4b1eb991b98b68883. Exploitation is possible...

CVE-2025-12277 Abdullah-Hasan-Sajjad Online-School studentLogin.php sql injection

A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has...

PHPGurukul Curfew e-Pass Management System 跨站脚本漏洞

Curfew e-Pass Management System is an electronic pass management system. Curfew e-Pass Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter adminname or email in the file...

PT-2025-43946

Name of the Vulnerable Software and Affected Versions Abdullah-Hasan-Sajjad Online-School versions prior to f09dda77b4c29aa083ff57f4b1eb991b98b68883 Description A flaw exists in Abdullah-Hasan-Sajjad Online-School. The issue is related to the manipulation of the Email argument in the...

Online-School SQL注入漏洞

Online-School is an online platform for schools by the individual developer Abdullah Hasan Sajjad Rafi. Online-School suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Email in the file /studentLogin.php, which could lead to a SQL injection attack...

SourceCodester Best Salon Management System SQL注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. A SQL injection vulnerability exists in SourceCodester Best Salon Management System version 1.0, which originates from the incorrect manipulation of the parameter email in the file...

Exploit for CVE-2025-61455

🛡️ CVE Disclosure: CVE-2025-61455 — SQL Injection in E-commerc...

CVE-2025-11654 yousaf530 Inferno Online Clothing Store log.php sql injection

A vulnerability was identified in yousaf530 Inferno Online Clothing Store up to 827dd42bfbe380e8de76fdc67958c24cf1246208. The affected element is an unknown function of the file /log.php. Such manipulation of the argument cemail/password leads to sql injection. It is possible to launch the attack...

CVE-2025-11654

CVE-2025-11654 affects yousaf530 Inferno Online Clothing Store. The vulnerability is a SQL injection in an unknown function within /log.php, triggered by manipulating the cemail/password parameters. A remote attacker could exploit it; public PoCs are noted in multiple feeds, and affected versions...

CVE-2025-11599

A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /forgot-password.php. This manipulation of the argument email causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...

CVE-2025-11611

A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public...

CVE-2025-11599

A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /forgot-password.php. This manipulation of the argument email causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...

CVE-2025-11599

A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /forgot-password.php. This manipulation of the argument email causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...

CVE-2025-11599

Campcodes Online Apartment Visitor Management System 1.0 has a SQL injection vulnerability in /forgot-password.php triggered by manipulating the email parameter. This allows remote exploitation, with exploits publicly available per multiple sources (NVD/CVE records, Red Hat, EUVD, CNNVD, etc.). T...

CVE-2025-11599 Campcodes Online Apartment Visitor Management System forgot-password.php sql injection

A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /forgot-password.php. This manipulation of the argument email causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...

CVE-2025-11511

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplieradd.php. Executing manipulation of the argument suppemail can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...