PT-2025-3398 · Unknown · Youdiancms

Name of the Vulnerable Software and Affected Versions: YouDianCMS versions 9.5.20 and earlier Description: The issue allows a remote attacker to escalate privileges via the sessionID parameter in the "index.php" file. This is related to incorrect session management, which can lead to privilege...

CVE-2024-55494: Improper Neutralization of Input During Web Page Generation

A PHP Code Injection vulnerability that can lead to Remote Code Execution RCE and XSS in Opencode Mobile Collect Call v5.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the opfunc parameter at /occontrolpanel/index.php...

CVE-2025-0347: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Admission Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php of the component Login. The manipulation of the argument uid leads to sql injection. The attack can be initiated remotely. Th...

CVE-2024-10585: Improper Limitation of a Pathname to a Restricted Directory

The InfiniteWP Client plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.13.0 via the 'historyID' parameter of the /debug-chart/index.php file. This makes it possible for unauthenticated attackers to read .txt files outside of the intended directory...

CVE-2025-0211: External Control of File Name or Path

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploi...

CVE-2025-0206: Improper Access Control

A vulnerability classified as critical was found in code-projects Online Shoe Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed...

CVE-2025-0214: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in TMD Custom Header Menu 4.0.0.1 on OpenCart. It has been rated as problematic. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument headermenuid leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-13074 PHPGurukul Land Record System index.php cross site scripting

A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-13074

CVE-2024-13074 concerns PHPGurukul Land Record System 1.0. The vulnerability affects an unknown part of the file /index.php, where manipulation of the searchdata argument leads to cross-site scripting (XSS). The issue can be triggered remotely and exploits have been disclosed publicly. Multiple c...

PHPGurukul Land Record System 安全漏洞

PHPGurukul Land Record System is a land management system from PHPGurukul. A security vulnerability exists in PHPGurukul Land Record System version 1.0, which stems from the parameter searchdata in the file /index.php that leads to cross-site scripting...

CVE-2024-13078: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2024-13038

CVE-2024-13038 affects CodeAstro Simple Loan Management System v1.0, specifically the Login module’s /index.php. The vulnerability arises from manipulating the email parameter, causing SQL injection. It is exploitable remotely, and public exploits are disclosed. Multiple sources corroborate the i...

CVE-2024-13001: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Small CRM 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

PT-2024-17861 · Unknown · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /admin/index.php. The manipulation of the email argument leads to SQL injection. It is possible to launch...

CVE-2024-12998: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely...

Code-Projects Online Car Rental System 代码注入漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A code injection vulnerability exists in Code-Projects Online Car Rental System version 1.0, which originates from a cross-site scripting vulnerability contained in multiple parameters of the /index.php...

CVE-2024-12969: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. T...

CVE-2024-54811: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "login" parameter...

CVE-2024-12357 SourceCodester Best House Rental Management System index.php file inclusion

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The...

SourceCodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a SourceCodester open source house rental management system. A security vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which originates from a file inclusion issue in the page parameter of the /index.ph...