326 matches found
CVE-2025-6860
CVE-2025-6860 익스플로잇 도구 CVE‑2025‑6860 SQL 인젝션 취약점을 탐지및 기본적인 익스플로잇하기 위한 C로 작성된 개념 증명 명령줄 도구입니다. staffcommision.php의 파라미터 fromdate 및 todate를 대상으로 합니다. libcurl 을 활용하여 HTTP 요청을 보내고, 일반적인 페이로드와 사용자 에이전트를 순환하며, 응답에서 SQL 오류 패턴을 스캔하고, 컬러풀하고 syscall 기반의 콘솔 출력을 생성합니다. 기능 자동 페이로드 순환 fromdate와 todate에 대해 다양한...
EUVD-2026-78223
A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...
CVE-2026-90841
A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...
CVE-2026-90841: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...
CVE-2026-90841 PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection
A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...
CVE-2026-90841 PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection
A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...
PT-2026-91765
A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...
CVE-2025-69935
CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...
EUVD-2025-210555
CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...
CVE-2025-69935
CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...
CVE-2025-69935
CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...
PT-2026-66584
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description SQL Injection occurs in the 'report.php' and 'revenue report.php' endpoints through the fromDate parameter. SQL Injection is a technique where malicious SQL statements are inserted...
CVE-2025-69935
The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection within the report.php and revenue_report.php files. The vulnerability is triggered via the fromDate parameter, allowing for the improper neutralization of special elements used in SQL commands. This issue can lead to un...
CVE-2025-69935: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...
CVE-2026-14796
A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-14796
CVE-2026-14796 affects CodeAstro Apartment Visitor Management System 1.0. Affected component: /apartment-visitor/report.php; vulnerability: SQL injection triggered by manipulating the fromdate parameter. Attackable remotely over network with no user interaction; attacker privileges required: LOW....
CVE-2026-14796
A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...
EUVD-2026-41807
A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-14796 CodeAstro Apartment Visitor Management System report.php sql injection
A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-14796: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...