CVE-2025-40686

CVE-2025-40686 affects Human Resource Management System v1.0. A reflected Cross-Site Scripting vulnerability exists in the /detailview.php page via the employeeid parameter, allowing injected JavaScript to run in a victim’s browser. Exploitation details are not provided in the CVE entry; related ...

CVE-2025-8254

A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /viewparcel.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

Code-Projects Exam Form Submission 注入漏洞

Code-Projects Exam Form Submission is an exam form from Code-Projects open source. An injection vulnerability exists in code-projects Exam Form Submission version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in file /admin/deletes4.php...

PT-2025-31564 · D Link · Di 8200

Name of the Vulnerable Software and Affected Versions: D-LINK DI-8200 version 16.07.26A1 Description: D-LINK DI-8200 version 16.07.26A1 is vulnerable to a buffer overflow in the yyxz dlink asp function via the id parameter. Recommendations: Restrict or disable the use of the yyxz dlink asp functi...

CVE-2025-8230

A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /manageuser.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-8188

A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /editstaff.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-8187

A vulnerability was found in Campcodes Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /editparcel.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-8185

A vulnerability was found in 1000 Projects ABC Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /getbyid.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

CampCodes Courier Management System 注入漏洞

CampCodes Courier Management System is a courier management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Courier Management System version 1.0, which originates from an SQL injection caused by the parameter ID in the file /editbranch.php...

code-projects Public Chat Room 注入漏洞

Code-Projects Public Chat Room is an open source public chat room software from Code-Projects. An injection vulnerability exists in code-projects Public Chat Room version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file sendmessage.php...

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17267)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the personalizacaoselecao.php endpoint id parameter, no details of the vulnerability are provided at this...

CVE-2025-6539

CVE-2025-6539 concerns the WordPress plugin Voltax Video Player (versions up to 1.6.5). The vulnerability is a Stored Cross-Site Scripting via the id parameter due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor level or higher, en...

CVE-2025-6539: Improper Neutralization of Input During Web Page Generation

The Voltax Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-38244)

Sales and Inventory System is a sales and inventory management system. The Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of security filtering on the ID parameter in the /pages/settingsupdate.php file of the Setting Handler component. Attackers can exploi...

Chat System fetch_chat.php file SQL Injection Vulnerability

Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /user/fetchchat.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

Online Library Management System /admin/student-history.php File SQL Injection Vulnerability

Online Library Management System is an online library management system. A SQL injection vulnerability exists in Online Library Management System, which originates from the lack of validation of externally-entered SQL statements in the parameter stdid in the file /admin/student-history.php. An...

Library System notapprove.php File SQL Injection Vulnerability

Library System is a library system. The Library System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /notapprove.php. An attacker can exploit this vulnerability to execute illegal SQL commands t...

jonnys Liquor delete-row.php file SQL injection vulnerability

jonnys Liquor is a content and management system. jonnys Liquor suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /admin/delete-row.php. An attacker can exploit this vulnerability to execute illegal...

Job Diary view-emp.php File SQL Injection Vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /view-emp.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

Chat System fetch_member.php File SQL Injection Vulnerability

Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /user/fetchmember.php. An attacker can exploit this vulnerability to execute illegal SQL commands to ste...