PT-2025-12457

Name of the Vulnerable Software and Affected Versions MagnusBilling versions through 7.3.0 Description The issue is related to improper neutralization of input during web page generation in MagnusSolution MagnusBilling login logging, allowing unauthenticated users to store HTML content. This can...

PT-2025-12415

Name of the Vulnerable Software and Affected Versions ITIUM 6050 version 5.5.5.2-b3526 Description This issue allows an attacker to execute malicious Javascript code via GET and POST requests to the "/index.php" endpoint and inject code into the id session. Recommendations For ITIUM 6050 version...

CVE-2025-29641: Improper Neutralization of Special Elements used in an SQL Command

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to SQL Injection in /index.php via the 'searchinputdata' parameter...

PT-2025-12426

Name of the Vulnerable Software and Affected Versions Phpgurukul Vehicle Record Management System version 1.0 Description The issue concerns SQL Injection in the /index.php endpoint via the searchinputdata parameter. This allows for potential manipulation of database queries. Recommendations For...

CVE-2025-2597: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the ‘/index.php’ endpoint and injecting code into the ‘idsession...

PT-2025-11570

Name of the Vulnerable Software and Affected Versions PHPGurukul Company Visitor Management System version 2.0 Description A critical vulnerability was found in the PHPGurukul Company Visitor Management System, affecting an unknown functionality of the file /index.php of the component Sign In. Th...

CVE-2025-2472 PHPGurukul Apartment Visitors Management System Sign In index.php sql injection

A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attac...

PT-2025-11447

Name of the Vulnerable Software and Affected Versions VAM Virtual Airlines Manager version 2.6.2 Description A vulnerability has been found in VAM Virtual Airlines Manager, affecting an unknown functionality of the file /vam/index.php. The manipulation of the argument registry id/plane icao/hub i...

CVE-2025-2354: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registryid/planeicao/hubid leads to cross site scripting. The attack can be...

CVE-2025-2353: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in VAM Virtual Airlines Manager up to 2.6.2. Affected is an unknown function of the file /vam/index.php of the component HTTP GET Parameter Handler. The manipulation of the argument ID/registryid/planeicao leads to sql injection. It is...

PT-2025-11446

Name of the Vulnerable Software and Affected Versions: VAM Virtual Airlines Manager versions up to 2.6.2 Description: A critical issue was found in the HTTP GET Parameter Handler of VAM Virtual Airlines Manager, affecting an unknown function of the file /vam/index.php. The manipulation of the ID,...

CVE-2024-55060

A cross-site scripting XSS vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-55060

Rafed CMS Website v1.44 is vulnerable to a cross-site scripting (XSS) vulnerability within the index.php component. This flaw allows an attacker to execute arbitrary web scripts or HTML by providing a crafted payload , such as index.php?>{XSS_Payload}. A proof-of-concept exploit is available, ...

CVE-2024-55060: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2025-11224

Name of the Vulnerable Software and Affected Versions: Rafed CMS Website version 1.44 Description: A cross-site scripting XSS vulnerability in the component index.php of Rafed CMS Website allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For Rafed C...

CVE-2025-2214: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Microweber 2.0.19. It has been rated as problematic. This issue affects some unknown processing of the file userfiles/modules/settings/group/websitegroup/index.php of the component Settings Handler. The manipulation of the argument group leads to cross site scripting...

CVE-2025-2133: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in ftcms 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/index.php/news/edit. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been...

PT-2025-10557

Name of the Vulnerable Software and Affected Versions ftcms version 2.1 Description A vulnerability was found in ftcms, affecting an unknown functionality of the file /admin/index.php/news/edit. The manipulation of the title argument leads to cross-site scripting. The attack can be launched...

CVE-2025-1966: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The...

PT-2025-9732

Name of the Vulnerable Software and Affected Versions PHPGurukul Pre-School Enrollment System version 1.0 Description A critical vulnerability was found in PHPGurukul Pre-School Enrollment System. The issue affects an unknown functionality of the file /admin/index.php. Manipulation of the usernam...