Lucene search
+L

106 matches found

EUVD
EUVD
•added 2026/07/30 12:31 a.m.•29 views

EUVD-2025-210538

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

6AI score0.00211EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•11 views

CVE-2025-69949: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

7.3CVSS5.8AI score0.00211EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/29 12:00 a.m.•20 views

CVE-2025-69949

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

5.8AI score0.00211EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/29 12:00 a.m.•20 views

CVE-2025-69949

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...

6AI score0.00211EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•33 views

PT-2026-65925

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0 Description The software contains a SQL Injection flaw in the 'check availability.php' endpoint. This issue occurs when the application improperly handles the emailid and email parameters,...

7.3CVSS5.8AI score0.00211EPSS
SaveExploits0References5
CNVD
CNVD
•added 2025/11/20 12:00 a.m.•24 views

Online Shopping Portal login.php File SQL Injection Vulnerability

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of externally-entered SQL statements for the fullname, emailid, and contactno parameters in login.php. An attacker can exploit this vulnerability to execute...

6.5CVSS6.2AI score0.00258EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/18 12:11 a.m.•30 views

CVE-2024-44660

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•21 views

Student Record System password-recovery.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements for the id and emailid parameters in password-recovery.php. An attacker can exploit this vulnerability to...

6.5CVSS6.3AI score0.00258EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/17 7:16 p.m.•18 views

CVE-2024-44660

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...

6.5CVSS0.00258EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/17 12:00 a.m.•36 views

CVE-2024-44660

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection due to a lack of validation for externally-entered SQL statements. The vulnerability specifically affects the fullname, emailid, and contactno parameters within the login.php file. An attacker can exploit this flaw to execute il...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•25 views

PT-2025-47197

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal version 2.0 is susceptible to SQL Injection. This issue affects the login.php file and specifically involves the fullname, emailid, and contactno...

6.5CVSS6AI score0.00258EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•8 views

CVE-2024-44660: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•17 views

PHPGurukul Online Shopping Portal has a security vulnerability

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of externally-entered SQL statements for the fullname, emailid, and contactno parameters in login.php. An attacker can exploit this vulnerability to execute...

6.5CVSS6.2AI score0.00258EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2025/11/14 4:15 p.m.•20 views

CVE-2024-44632

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/14 12:00 a.m.•28 views

CVE-2024-44632

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...

0.00258EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•8 views

CVE-2024-44632: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/09 2:04 a.m.•18 views

CVE-2025-11424

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

9.8CVSS7.1AI score0.00478EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/10/08 2:15 a.m.•19 views

CVE-2025-11424

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

9.8CVSS7AI score0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/08 2:02 a.m.•12 views

CVE-2025-11424 code-projects Web-Based Inventory and POS System login.php sql injection

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

7.5CVSS7AI score0.00478EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/10/08 12:00 a.m.•25 views

PT-2025-41214

Name of the Vulnerable Software and Affected Versions code-projects Web-Based Inventory and POS System version 1.0 Description A flaw exists in code-projects Web-Based Inventory and POS System 1.0. The issue is related to the manipulation of the emailid argument in the /login.php file, which can...

9.8CVSS7.3AI score0.00478EPSS
SaveExploits1References11
Rows per page
Query Builder