Lucene search
+L

1530 matches found

Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.9 views

PT-2025-47188

Name of the Vulnerable Software and Affected Versions PHPGurukul Complaint Management System version 2.0 Description The PHPGurukul Complaint Management System version 2.0 contains a SQL Injection flaw. The issue is located in the reset-password.php file and affects the email and mobileno...

6.5CVSS7.6AI score0.0024EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.11 views

PT-2025-47177

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0 Description The Kashipara Ecommerce Website is susceptible to a SQL Injection issue through the recover email parameter in the user password recover.php file. This allows for potential unauthorized acces...

6.5CVSS7.7AI score0.0024EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/17 12:00 a.m.7 views

EUVD-2024-55091

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail parameter in userlogin.php...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References3
CVE
CVE
added 2025/11/17 12:00 a.m.16 views

CVE-2024-44651

CVE-2024-44651 affects Kashipara Ecommerce Website 1.0. The vulnerability is a SQL Injection via the recover_email parameter in user_password_recover.php, caused by unvalidated input. Impact per the reports is potential unauthorized DB access; CVSS v3.1 base score 6.5 (Medium) with network access...

6.5CVSS7.6AI score0.0024EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/11/17 12:00 a.m.19 views

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

0.0024EPSS
SaveExploits1References2
CVE
CVE
added 2025/11/17 12:00 a.m.19 views

CVE-2024-44659

CVE-2024-44659 affects the PHPGurukul Online Shopping Portal 2.0. The vulnerability is a SQL Injection in the forgot-password.php script through the email parameter, due to improper input handling. This can enable arbitrary SQL execution with high impact on confidentiality, integrity, and availab...

9.8CVSS7.6AI score0.00408EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.11 views

PT-2025-47202

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal 2.0 is susceptible to SQL Injection due to improper handling of the email parameter in the forgot-password.php script. Successful exploitation allo...

9.8CVSS8.4AI score0.00408EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.8 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the email and mobileno parameters of reset-password.php. An attacker can exploit this...

6.5CVSS8.2AI score0.0024EPSS
SaveExploits1References3
OSV
OSV
added 2025/11/16 4:15 a.m.11 views

CVE-2025-13235

A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument useremail can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/16 12:00 a.m.12 views

itsourcecode Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from the useremail parameter not being effectively filtered in the /admin/login.php file. No details of the vulnerability are available at this time...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/14 12:00 a.m.9 views

CVE-2024-44630

Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country,...

7.2AI score0.0024EPSS
SaveExploits1References2
CNVD
CNVD
added 2025/11/12 12:00 a.m.19 views

Responsive Hotel Site reservation.php File SQL Injection Vulnerability

Responsive Hotel Site is a responsive hotel website. Responsive Hotel Site suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /admin/reservation.php. An attacker can exploit this vulnerabilit...

9.8CVSS8.2AI score0.00381EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/11/10 12:00 a.m.11 views

CanalDenuncia App Information Disclosure Vulnerability

CanalDenuncia App is a reporting channel application from CanalDenuncia Spain. The CanalDenuncia App suffers from an information disclosure vulnerability caused by incorrect authorization validation of the parameter email in /backend/api/users/searchUserByEmail.php, which can be exploited by an...

8.7CVSS6.3AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/08 1:57 p.m.22 views

CVE-2025-12856

A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.php. This manipulation of the argument email causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS7AI score0.00381EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/07 2:15 p.m.11 views

CVE-2025-12856

A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.php. This manipulation of the argument email causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS0.00381EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/07 1:32 p.m.14 views

EUVD-2025-38248

A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.php. This manipulation of the argument email causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

5.8CVSS4.8AI score0.00381EPSS
SaveExploits1References6
CVE
CVE
added 2025/11/07 1:32 p.m.34 views

CVE-2025-12856

CVE-2025-12856 affects code-projects Responsive Hotel Site 1.0. The vulnerability lies in the /admin/reservation.php file, where manipulation of the email parameter enables SQL injection. Several connected sources confirm remote exploitation and public availability of an exploit. Provided documen...

9.8CVSS5.1AI score0.00381EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/07 1:32 p.m.6 views

CVE-2025-12856 code-projects Responsive Hotel Site reservation.php sql injection

A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.php. This manipulation of the argument email causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

5.8CVSS6.6AI score0.00381EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/11/07 12:49 p.m.16 views

CVE-2025-41343

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'email' in '/backend/api/users/searchUserByEmail.php'...

8.7CVSS6.7AI score0.00276EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/07 12:00 a.m.8 views

Code-Projects Responsive Hotel Site 安全漏洞

Responsive Hotel Site is a responsive hotel website. Responsive Hotel Site suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /admin/reservation.php. An attacker can exploit this vulnerabilit...

9.8CVSS5.7AI score0.00381EPSS
SaveExploits1References6
Rows per page
Query Builder