CVE-2025-22930

OS4ED openSIS versions v7.0 through v9.1 are affected by a SQL injection vulnerability (CWE-89). The flaw exists in the groupid parameter located at the /messaging/Group.php endpoint. An attacker could exploit this to perform unauthorized database operations. To mitigate this risk, it is recommen...

PT-2023-29815 · Unknown · Geeklog-Core

Name of the Vulnerable Software and Affected Versions: Geeklog-Core geeklog version 2.2.2 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via a crafted payload to the grp desc parameter of the "admin/group.php" component. This enables the attacker ...

FS Linkedin Clone SQL Injection Vulnerability

FS Linkedin Clone is a set of PHP and MySQL based scripts for job search and recruitment websites. A SQL injection vulnerability exists in FS Linkedin Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'grid' parameter to the group.php file, the 'fid' parameter to...