EUVD-2005-2055

Malware in sbrugna...

EUVD-2006-1837

Malware in sbrugna...

EUVD-2007-1156

Malware in sbrugna...

EUVD-2008-6008

Malware in sbrugna...

EUVD-2010-4584

Malware in sbrugna...

EUVD-2009-3229

Malware in sbrugna...

EUVD-2010-1142

Malware in sbrugna...

EUVD-2008-2298

Malware in sbrugna...

PT-2025-41138

Name of the Vulnerable Software and Affected Versions PuneethReddyHC Event Management System version 1.0 Description A Cross-Site Scripting XSS issue exists in the register.php page. The event id GET parameter is improperly handled, allowing an attacker to inject code into this parameter and...

EUVD-2025-32722

A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...

CVE-2025-56243

A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...

CVE-2025-56243

PuneethReddyHC Event Management System 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the register.php page. The event_id GET parameter is improperly handled, allowing an attacker to craft a malicious URL that executes arbitrary JavaScript in a victim’s browser. The issue is specifica...

PT-2025-40974

Name of the Vulnerable Software and Affected Versions Simple Banking System version 1.0 Description A security issue exists in Simple Banking System 1.0 related to SQL injection. The issue is located in the /transfermoney.php file, specifically through manipulation of the ID argument. Remote...

CVE-2025-56243

A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...

CVE-2025-10692

The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...

EUVD-2025-32523

A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-11329

CVE-2025-11329 affects code-projects Online Course Registration 1.0. The SQL injection vulnerability originates from unsafely handling the ID parameter in the file /admin/manage-students.php, affecting an unknown function and enabling remote exploitation. Multiple sources confirm the vulnerabilit...

Code-Projects Student Crud Operation 安全漏洞

Student Crud Operation is a student information system. Student Crud Operation suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file delete.php. An attacker can exploit this vulnerability to execute...

EUVD-2025-32450

A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...

CVE-2025-11288 CRMEB GET Parameter product sql injection

A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing a manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...