CVE-2025-22930

The OS4ED openSIS student information management system, versions v7.0 through v9.1 , is vulnerable to a SQL injection flaw. The vulnerability exists in the groupid parameter at the /messaging/Group.php endpoint. Attackers could potentially exploit this to interact with the backend database. To m...

PT-2023-29815 · Unknown · Geeklog-Core

Name of the Vulnerable Software and Affected Versions: Geeklog-Core geeklog version 2.2.2 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via a crafted payload to the grp desc parameter of the "admin/group.php" component. This enables the attacker ...

FS Linkedin Clone SQL Injection Vulnerability

FS Linkedin Clone is a set of PHP and MySQL based scripts for job search and recruitment websites. A SQL injection vulnerability exists in FS Linkedin Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'grid' parameter to the group.php file, the 'fid' parameter to...