CVE-2025-8811

CVE-2025-8811 affects Simple Art Gallery 1.0 (Code-Projects). The vulnerability is a SQL injection in the /Admin/registration.php file, triggered by manipulating the fname argument. It is remotely exploitable and has been publicly disclosed. Multiple sources classify the issue as critical with hi...

Code-Projects Simple Art Gallery 注入漏洞

Code-Projects Simple Art Gallery is a Code-Projects open source simple art gallery software. An injection vulnerability exists in Code-Projects Simple Art Gallery version 1.0, which originates from a SQL injection due to a misuse of the parameter fname in the file /Admin/registration.php, which...

PT-2025-32485 · Unknown · Simple Art Gallery

Name of the Vulnerable Software and Affected Versions: Simple Art Gallery version 1.0 Description: A critical vulnerability exists in Simple Art Gallery 1.0 due to a SQL injection flaw. The issue is located in an unknown functionality within the /Admin/registration.php file. The fname argument ca...

CVE-2023-41529

Hospital Management System v4 was discovered to contain multiple cross-site scripting XSS vulnerabilities in func2.php via the fname and lname parameters...

CVE-2025-8167

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editmembers.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launch...

Code-Projects Church Donation System 代码注入漏洞

Code-Projects Church Donation System is an open source church donation system by Code-Projects. A code injection vulnerability exists in Code-Projects Church Donation System version 1.0, which originates from cross-site scripting due to misbehavior of the parameter fname in the file...

PT-2025-30932 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A vulnerability exists in Church Donation System version 1.0 related to cross site scripting. The issue is located in the /admin/edit members.php file. Manipulation of the fname argument can lea...

U.S. Dept Of Defense: Cross-Site Scripting via 'fname' parameter in ███

A Cross-Site Scripting XSS vulnerability was discovered in the 'fname' parameter of the target application. The vulnerability allowed an attacker to inject malicious scripts that could be executed. Exploitation of this vulnerability could have led to consequences such as cookie theft and session...

CVE-2025-7929

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /members/editMembers.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit...

PT-2025-30296 · Code Projects · Church Donation System

Name of the Vulnerable Software and Affected Versions: code-projects Church Donation System version 1.0 Description: A critical issue exists in code-projects Church Donation System 1.0. The manipulation of the fname argument in the /members/edit Members.php file leads to SQL injection. This allow...

Car Rental System signup.php File SQL Injection Vulnerability

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /signup.php. The vulnerability can be exploited to execute illegal SQL...

Car Rental System book_car.php File SQL Injection Vulnerability

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /bookcar.php. The vulnerability can be exploited to execute illegal SQL...

CVE-2025-6907

A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /bookcar.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-6907 code-projects Car Rental System book_car.php sql injection

A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /bookcar.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-6905

A vulnerability, which was classified as critical, has been found in code-projects Car Rental System 1.0. This issue affects some unknown processing of the file /signup.php. The manipulation of the argument fname leads to sql injection. The attack may be initiated remotely. The exploit has been...

Code-Projects Car Rental System 注入漏洞

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /signup.php. The vulnerability can be exploited to execute illegal SQL...

code-projects Car Rental System 安全漏洞

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /bookcar.php. The vulnerability can be exploited to execute illegal SQL...

PT-2025-27440 · Unknown · Code-Projects Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical vulnerability was found in the code-projects Car Rental System, affecting unknown code in the file /book car.php. The manipulation of the fname argument leads to SQL injectio...

1000 Projects Online Notice Board 安全漏洞

1000 Projects Online Notice Board is an online bulletin board from 1000 Projects open source. A security vulnerability exists in 1000 Projects Online Notice Board version 1.0, which stems from an incorrect manipulation of the parameter fname, resulting in SQL injection...

CVE-2024-50991

A Cross Site Scripting XSS vulnerability was found in /ums-sp/admin/registered-users.php in PHPGurukul User Management System v1.0, which allows remote attackers to execute arbitrary code via the "fname" POST request parameter...