6676 matches found
Projectworlds Gym Management System 安全漏洞
Projectworlds Gym Management System is a gym management system from Projectworlds India. A security vulnerability exists in Projectworlds Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter id in the profile/edit.php page, which could lead to a SQL...
EUVD-2025-33283
ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page...
CVE-2025-60311
ProjectWorlds Gym Management System 1.0 is vulnerable to SQL Injection via the id parameter in profile/edit.php. The root cause is improper input handling of id, enabling attackers to influence SQL queries and potentially access or modify data. Evidence across multiple sources confirms the vulner...
CVE-2025-11288
A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing a manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...
CVE-2025-11405 SourceCodester Hotel and Lodge Management System del_tax.php sql injection
A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...
CVE-2025-11343
A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly an...
CVE-2025-56243
A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...
CVE-2025-56243
A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...
Exploit for CVE-2025-52021
CVE-2025-52021 — Time-Based Blind SQL Injection in PuneethRedd...
CVE-2025-40676
CVE-2025-40676 affects Negotiator v3.15.2 from BBMRI-ERIC. The vulnerability is an insecure direct object reference (IDOR) in the userID parameter of the /api/v3/users/ endpoint, enabling an attacker to access or modify unauthorised resources and potentially expose or alter sensitive data. The CV...
EUVD-2025-32703
A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and...
CVE-2025-11359 code-projects Simple Banking System transfermoney.php sql injection
A security vulnerability has been detected in code-projects Simple Banking System 1.0. The affected element is an unknown function of the file /transfermoney.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...
CVE-2025-11358
CVE-2025-11358 affects code-projects Simple Banking System 1.0, specifically the file /removeuser.php. The weakness arises from manipulation of the ID parameter, enabling SQL injection. Exploitation can be performed remotely, and public exploits exist. Multiple connected sources corroborate the v...
EUVD-2011-0539
Malware in sbrugna...
EUVD-2007-1156
Malware in sbrugna...
EUVD-2019-3990
Malware in sbrugna...
EUVD-2009-0450
Malware in sbrugna...
EUVD-2008-6200
Malware in sbrugna...