6746 matches found
itsourcecode Gym Management System 注入漏洞
itsourcecode Gym Management System is an open source gym management system from itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Gym Management System, which results from SQL injection due to incorrect manipulation of the parameter ID in the file /viewmember.php...
SourceCodester Advanced Web Store 安全漏洞
SourceCodester Advanced Web Store is a SourceCodester open source advanced web store. A security vulnerability exists in SourceCodester Advanced Web Store version 1.0, which stems from improper manipulation of the parameter prodid in the file /productdetail.php, which could lead to a SQL injectio...
PHPGurukul e-Diary Management System 注入漏洞
PHPGurukul e-Diary Management System is an electronic diary management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul e-Diary Management System, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file...
WordPress plugin SurveyJS 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
Patient Record Management System edit_rpatient.php.php file SQL injection vulnerability
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter id/lastname in file /editrpatient.php.php. An attacker...
SourceCodester Computer Laboratory Management System 安全漏洞
SourceCodester Computer Laboratory Management System is a SourceCodester open source computer laboratory management system. A security vulnerability exists in SourceCodester Computer Laboratory Management System v1.0, which originates from SQL injection of the id parameter in the managedamage.php...
CodeAstro Membership Management System 注入漏洞
CodeAstro Membership Management System is a membership management system from CodeAstro. An injection vulnerability exists in CodeAstro Membership Management System version 1.0, which is caused by SQL injection due to the operation of the parameter ID in the file renew.php?id=6...
paicoding 安全漏洞
paicoding is an open source community system for itwanger individual developers. A security vulnerability exists in paicoding version 1.0.3, which stems from improper authorization due to misuse of the parameter articleId in the file /article/api/post...
Dreamer CMS 安全漏洞
Dreamer CMS is a Dreamer Content Management System by Junnan Wang, an individual developer in China. A security vulnerability exists in Dreamer CMS 4.1.3 and earlier versions, which stems from improper authorization due to misuse of the parameter ID in the file /admin/attachment/download...
Code-Projects News Publishing Site Dashboard 注入漏洞
Code-Projects News Publishing Site Dashboard is a Code-Projects open source news publishing site dashboard. An injection vulnerability exists in Code-Projects News Publishing Site Dashboard version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter catid in the fil...
Patient Record Management System edit_fpatient.php File SQL Injection Vulnerability
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of adequate validation of inputs to the ID parameter in the file /editfpatient.php. No details of the vulnerability are...
pixiv: Bypassing Inbox Privacy Settings and Enabling Spam on Pixiv.net
A vulnerability was discovered in the messaging system of Pixiv.net. The vulnerability allowed any user to bypass the inbox privacy settings and send messages to another user who had disabled their inbox. The vulnerability was triggered by manipulating the id parameter in the message-sending POST...
SeaCMS 注入漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. An injection vulnerability exists in SeaCMS 13.3 and earlier versions, which stems from an SQL injection due to the operation of the...
Patient Record Management System dental_pending.php File SQL Injection Vulnerability
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the /dentalpending.php file. An attacker can exploit...
CVE-2024-40068
Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...
CVE-2024-40068
Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...
PT-2025-16272 · Unknown · Sourcecodester Music Class Enrollment System
Name of the Vulnerable Software and Affected Versions: SourceCodester Music Class Enrollment System version 1.0 Description: A critical vulnerability was found in the SourceCodester Music Class Enrollment System. The issue affects an unknown function of the file /manage class.php. The manipulatio...
CVE-2025-3537
A vulnerability was found in Tutorials-Website Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-user.php. The manipulation of the argument ID leads to improper authorization. It is possible to initiate the attack remotely...
PT-2025-16168 · WordPress · User Registration & Membership
Name of the Vulnerable Software and Affected Versions: User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress versions up to, and including, 4.1.3 Description: The issue allows unauthenticated attackers to update other users' passwords if they...