Lucene search
+L

102 matches found

EUVD
EUVD
•added 2026/07/30 12:31 a.m.•24 views

EUVD-2025-210538

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

6AI score0.00211EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/29 12:00 a.m.•12 views

CVE-2025-69949

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

6AI score0.00211EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•26 views

PT-2026-65925

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0 Description The software contains a SQL Injection flaw in the 'check availability.php' endpoint. This issue occurs when the application improperly handles the emailid and email parameters,...

7.3CVSS5.8AI score0.00211EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•2 views

CVE-2025-69949: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

7.3CVSS5.8AI score0.00211EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/29 12:00 a.m.•11 views

CVE-2025-69949

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

5.8AI score0.00211EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/11/20 12:00 a.m.•18 views

Online Shopping Portal login.php File SQL Injection Vulnerability

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of externally-entered SQL statements for the fullname, emailid, and contactno parameters in login.php. An attacker can exploit this vulnerability to execute...

6.5CVSS8.3AI score0.0024EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/18 12:11 a.m.•26 views

CVE-2024-44660

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...

6.5CVSS8AI score0.0024EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•17 views

Student Record System password-recovery.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements for the id and emailid parameters in password-recovery.php. An attacker can exploit this vulnerability to...

6.5CVSS8.3AI score0.0024EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/17 7:16 p.m.•13 views

CVE-2024-44660

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•13 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of externally-entered SQL statements for the fullname, emailid, and contactno parameters in login.php. An attacker can exploit this vulnerability to execute...

6.5CVSS8.2AI score0.0024EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•19 views

PT-2025-47197

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal version 2.0 is susceptible to SQL Injection. This issue affects the login.php file and specifically involves the fullname, emailid, and contactno...

6.5CVSS7.6AI score0.0024EPSS
SaveExploits1References6
CVE
CVE
•added 2025/11/17 12:00 a.m.•27 views

CVE-2024-44660

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection due to a lack of validation for externally-entered SQL statements. The vulnerability specifically affects the fullname, emailid, and contactno parameters within the login.php file. An attacker can exploit this flaw to execute il...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•1 views

CVE-2024-44660: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/14 4:15 p.m.•14 views

CVE-2024-44632

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/14 12:00 a.m.•22 views

CVE-2024-44632

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...

0.0024EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•2 views

CVE-2024-44632: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/09 2:04 a.m.•12 views

CVE-2025-11424

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

9.8CVSS7AI score0.00478EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/08 2:15 a.m.•14 views

CVE-2025-11424

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

9.8CVSS5.7AI score0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/08 2:02 a.m.•7 views

CVE-2025-11424 code-projects Web-Based Inventory and POS System login.php sql injection

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

7.5CVSS6.9AI score0.00478EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/08 12:00 a.m.•3 views

CVE-2025-11424: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

9.8CVSS5.6AI score0.00478EPSS
SaveExploits1References1
Rows per page
Query Builder