Lucene search
+L

1530 matches found

RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.23 views

CVE-2024-44659

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php...

9.8CVSS8AI score0.00408EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.17 views

CVE-2024-44651

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recoveremail parameter in userpasswordrecover.php...

6.5CVSS8AI score0.0024EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/11/18 12:00 a.m.20 views

CVE-2025-63514

kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...

0.00198EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/11/18 12:00 a.m.5 views

CVE-2025-63514

kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...

5.5AI score0.00198EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/11/18 12:00 a.m.9 views

PT-2025-47369

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System affected versions not specified Description The software contains a Cross-Site Scripting XSS issue in the 'appsearch.php' file. The issue is triggered through the email parameter. This allows for the...

6.1CVSS6AI score0.00198EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.12 views

Hospital Management System 安全漏洞

Hospital Management System is a hospital management software by the individual developer Pon Aravind Boominathan. A security vulnerability exists in Hospital Management System that stems from improper handling of the email parameter in appsearch.php, which could lead to cross-site scripting...

6.1CVSS6.2AI score0.00198EPSS
SaveExploits1References3
CVE
CVE
added 2025/11/18 12:00 a.m.22 views

CVE-2025-63514

The CVE-2025-63514 entry documents a Cross-Site Scripting (XSS) vulnerability in the kishan0725 Hospital Management System, specifically in the appsearch.php script, exploitable via the email parameter. The PT-2025-47369 report reiterates a user-controlled input in the email parameter leading to ...

6.1CVSS5.5AI score0.00198EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2025/11/18 12:00 a.m.11 views

Inventory Management System /admin/login.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from the useremail parameter not being effectively filtered in the /admin/login.php file. No details of the vulnerability are available at this time...

9.8CVSS8.1AI score0.00387EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.10 views

Hospital Management System 安全漏洞

Hospital Management System is a hospital management software by Pon Aravind Boominathan, an individual developer. A security vulnerability exists in Hospital Management System version v4, which stems from mishandling of the email parameter in admin-panel1.php, which may lead to SQL injection...

6.5CVSS7.4AI score0.00238EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/17 8:15 p.m.9 views

CVE-2024-44659

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/17 7:16 p.m.10 views

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/17 7:16 p.m.9 views

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/17 6:15 p.m.12 views

CVE-2024-44653

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail parameter in userlogin.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/17 6:15 p.m.9 views

CVE-2024-44651

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recoveremail parameter in userpasswordrecover.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/17 12:00 a.m.9 views

EUVD-2024-55095

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.8 views

PT-2025-47187

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0 Description The software is susceptible to a SQL Injection issue through the user email parameter in the user login.php file. This allows for potential unauthorized access or manipulation of data. The...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/17 12:00 a.m.4 views

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

7.6AI score0.0024EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/17 12:00 a.m.9 views

EUVD-2024-55092

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recoveremail parameter in userpasswordrecover.php...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References3
CVE
CVE
added 2025/11/17 12:00 a.m.22 views

CVE-2024-44653

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php. Multiple Connected sources corroborate a SQLi flaw stemming from unvalidated input in user_login.php, enabling potential unauthorized data access or manipulation. The attack surface is t...

6.5CVSS7.6AI score0.0024EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2025/11/17 12:00 a.m.18 views

CVE-2024-44654

CVE-2024-44654 affects PHPGurukul Complaint Management System 2.0. The vulnerability is a SQL Injection in reset-password.php via the email and mobileno parameters, due to improper validation/handling of externally supplied SQL statements. The impact stated across sources is potential unauthorize...

6.5CVSS7.6AI score0.0024EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder