9792 matches found
CVE-2025-4360
A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The explo...
CVE-2025-4311
A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /admin/updatemaintopicimg.php?topicid=529. The manipulation of the argument stopicid leads to sql injection. The attack can be initiated remotely. Th...
SourceCodester Advanced Web Store 安全漏洞
SourceCodester Advanced Web Store is a SourceCodester open source advanced web store. A security vulnerability exists in SourceCodester Advanced Web Store version 1.0, which stems from improper manipulation of the parameter prodid in the file /productdetail.php, which could lead to a SQL injectio...
CVE-2025-3782: Improper Neutralization of Input During Web Page Generation
The Cision Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 4.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
itsourcecode Gym Management System 注入漏洞
itsourcecode Gym Management System is an open source gym management system from itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Gym Management System, which results from SQL injection due to incorrect manipulation of the parameter ID in the file /viewmember.php...
PHPGurukul e-Diary Management System 注入漏洞
PHPGurukul e-Diary Management System is an electronic diary management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul e-Diary Management System, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file...
WordPress plugin SurveyJS 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
CVE-2025-3815: Improper Neutralization of Input During Web Page Generation
The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.12.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
Patient Record Management System edit_rpatient.php.php file SQL injection vulnerability
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter id/lastname in file /editrpatient.php.php. An attacker...
SourceCodester Computer Laboratory Management System 安全漏洞
SourceCodester Computer Laboratory Management System is a SourceCodester open source computer laboratory management system. A security vulnerability exists in SourceCodester Computer Laboratory Management System v1.0, which originates from SQL injection of the id parameter in the managedamage.php...
CVE-2025-45956: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in managedamage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter...
CodeAstro Membership Management System 注入漏洞
CodeAstro Membership Management System is a membership management system from CodeAstro. An injection vulnerability exists in CodeAstro Membership Management System version 1.0, which is caused by SQL injection due to the operation of the parameter ID in the file renew.php?id=6...
paicoding 安全漏洞
paicoding is an open source community system for itwanger individual developers. A security vulnerability exists in paicoding version 1.0.3, which stems from improper authorization due to misuse of the parameter articleId in the file /article/api/post...
Dreamer CMS 安全漏洞
Dreamer CMS is a Dreamer Content Management System by Junnan Wang, an individual developer in China. A security vulnerability exists in Dreamer CMS 4.1.3 and earlier versions, which stems from improper authorization due to misuse of the parameter ID in the file /admin/attachment/download...
Code-Projects News Publishing Site Dashboard 注入漏洞
Code-Projects News Publishing Site Dashboard is a Code-Projects open source news publishing site dashboard. An injection vulnerability exists in Code-Projects News Publishing Site Dashboard version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter catid in the fil...
Patient Record Management System edit_fpatient.php File SQL Injection Vulnerability
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of adequate validation of inputs to the ID parameter in the file /editfpatient.php. No details of the vulnerability are...
pixiv: Bypassing Inbox Privacy Settings and Enabling Spam on Pixiv.net
A vulnerability was discovered in the messaging system of Pixiv.net. The vulnerability allowed any user to bypass the inbox privacy settings and send messages to another user who had disabled their inbox. The vulnerability was triggered by manipulating the id parameter in the message-sending POST...
SeaCMS 注入漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. An injection vulnerability exists in SeaCMS 13.3 and earlier versions, which stems from an SQL injection due to the operation of the...
Patient Record Management System dental_pending.php File SQL Injection Vulnerability
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the /dentalpending.php file. An attacker can exploit...
