PT-2026-106041

A vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected is an unknown function of the file patient info.php. Performing a manipulation of the argument patient id results in sql injection. The attack is possible to be carried out remotel...

VulnCheck KEV: CVE-2018-10736

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter...

D-Link DIR-816L 2.x - Cross-Site Scripting Detection

D-Link DIR-816L devices 2.x before 1.10b04Beta02 contains a cross-site scripting vulnerability. In the file webinc/js/info.php, no output filtration is applied to the RESULT parameter before being printed on the webpage. An attacker can inject arbitrary script in the browser of an unsuspecting us...

PT-2026-51519

DRIMO CMS is vulnerable to Reflected XSS via q parameter in searching functionality. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is in End Of Life phase and will not receive any updates. However, deleting info.php fi...

EUVD-2010-2909

Malware in sbrugna...

EUVD-2007-0182

Malware in sbrugna...

EUVD-2010-4938

Malware in sbrugna...

EUVD-2014-3768

Malware in sbrugna...

EUVD-2008-0403

Malware in sbrugna...

EUVD-2018-2186

Malware in sbrugna...

EUVD-2005-3645

Malware in sbrugna...

EUVD-2021-30590

Malicious code in bioql PyPI...

EUVD-2024-27505

Malicious code in bioql PyPI...

EUVD-2022-39238

Malicious code in bioql PyPI...

CVE-2025-10332

A vulnerability was found in cdevroe unmark up to 1.9.3. Impacted is an unknown function of the file application/views/marks/info.php. Performing manipulation of the argument Title results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public...

Unmark the code injection vulnerability

Unmark is an open source to-do list application for bookmarking. A cross-site scripting vulnerability exists in Unmark 1.9.3 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data in the parameter Title in the file application/views/marks/info.ph...

CVE-2025-10332: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in cdevroe unmark up to 1.9.3. Impacted is an unknown function of the file application/views/marks/info.php. Performing manipulation of the argument Title results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public...

CVE-2020-36848: Exposure of Sensitive Information to an Unauthorized Actor

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and restore-info.json files. This makes it possible for unauthenticated attackers to...

CVE-2025-5556: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Teacher Subject Allocation Management System 1.0. This affects an unknown part of the file /admin/edit-teacher-info.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack...

CVE-2022-4012

A vulnerability classified as critical has been found in Hospital Management Center. Affected is an unknown function of the file patient-info.php. The manipulation of the argument ptid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publ...