SourceCodester AC Repair and Services System 注入漏洞

SourceCodester AC Repair and Services System is a SourceCodester open source air conditioning repair and services system. An injection vulnerability exists in SourceCodester AC Repair and Services System version 1.0, which stems from the fact that incorrect manipulation of a parameter ID can lead...

SourceCodester Kortex Lite Advocate Office Management System 注入漏洞

SourceCodester Kortex Lite Advocate Office Management System is a SourceCodester open source office management system. An injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which stems from improper manipulation of the ID parameter in the...

CVE-2024-11167

Affected software/version : danny-avila/librechat

Online Class and Exam Scheduling System department.php file cross-site scripting vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters id, code, and name ...

Online Class and Exam Scheduling System room.php File Cross-Site Scripting Vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters id and rome of...

Sytel Softdial Contact Center（Sytel SCC） 路径遍历漏洞

Sytel Softdial Contact Center Sytel SCC is a cloud contact center software from Sytel. A path traversal vulnerability exists in Sytel Softdial Contact Center Sytel SCC, which originates from a path traversal of the /softdial/scheduler/load.php endpoint id parameter, which could lead to unauthoriz...

CVE-2025-29431

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/department.php via the id, code, and name parameters...

kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter

A flaw was foundin the Linux Kernel when specifying the srptserviceguid parameter, which may lead to kernel crash...

Code-Projects Blood Bank Management System 注入漏洞

Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. Code-Projects Blood Bank Management System version 1.0 suffers from an injection vulnerability that stems from improper manipulation of the stateid parameter, which could lead to an SQL...

The vulnerability of LLM-powered system startups like AnythingLLM, related to shortcomings in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the LLM startup and management system, AnythingLLM, is related to deficiencies in the authentication process when processing the id parameter. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ChurchCRM EditEventAttendees Feature Blind SQL Injection Vulnerability

ChurchCRM is an open source church management system. ChurchCRM suffers from a blind SQL injection vulnerability that stems from an EID parameter being directly connected to a SQL query without proper cleanup, which can be exploited by an attacker to execute arbitrary SQL queries using a...

dingfanzu 注入漏洞

dingfanzu is a php based takeaway ordering website by gk2007 individual developer. An injection vulnerability exists in dingfanzu 20250210 and earlier versions, which is caused by a SQL injection in the parameter shopId...

WordPress Indeed Ultimate Learning Pro plugin <= 3.9 - Authenticated (Administrator+) SQL Injection via post_id Parameter vulnerability

Authenticated Administrator+ SQL Injection via postid Parameter vulnerability discovered by Pham Van Tam in WordPress Plugin Indeed Ultimate Learning Pro versions = 3.9...

PT-2025-7508 · Baiyi · Baiyi Cloud Asset Management System

Name of the Vulnerable Software and Affected Versions: Baiyi Cloud Asset Management System versions up to 20250204 Description: A critical issue has been found in the Baiyi Cloud Asset Management System, affecting some unknown processing of the file /wuser/admin.house.collect.php. The manipulatio...

WordPress Tour Master plugin <= 5.3.6 - Authenticated (Subscriber+) SQL Injection via review_id Parameter vulnerability

Authenticated Subscriber+ SQL Injection via reviewid Parameter vulnerability discovered by Aiden Thái An in WordPress Plugin Tourmaster versions = 5.3.6...

WordPress Bit Assist plugin <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter vulnerability

Authenticated Subscriber+ SQL Injection via id Parameter vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Bit Assist versions = 1.5.2...

PT-2025-6847 · Sourcecodester · Sourcecodester Best Church Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.1 Description: A critical issue has been found in the software, affecting an unknown function of the file /admin/edit slider.php. The manipulation of the id argument leads to SQL...

CVE-2025-1173

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

PT-2025-2798 · Unknown · Compop.Ca Online Mall

Name of the Vulnerable Software and Affected Versions: compop.ca ONLINE MALL version 3.5.3 Description: An issue in compop.ca ONLINE MALL allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters. Recommendations: For compop.ca ONLINE MALL version 3.5.3, consider...

1000 Projects Attendance Tracking Management System 注入漏洞

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Attendance Tracking Management System, which originates from the parameter attendanceid in file...