CVE-2025-2050: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched...

PT-2025-10017

Name of the Vulnerable Software and Affected Versions PHPGurukul User Registration & Login and User Management System version 3.3 Description A critical vulnerability was found in the PHPGurukul User Registration & Login and User Management System. The issue affects an unknown functionality of th...

CVE-2025-1965: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in projectworlds Online Hotel Booking 1.0. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument emailusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2025-9727

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Hotel Booking version 1.0 Description A critical vulnerability has been found in ProjectWorlds Online Hotel Booking. The issue affects an unknown function of the file /admin/login.php. Manipulation of the emailusername...

CVE-2025-1954 PHPGurukul Human Metapneumovirus Testing Management System login.php sql injection

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument username leads to sql injection. The attack can be...

PT-2025-9707

Name of the Vulnerable Software and Affected Versions PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description A critical issue has been found in the PHPGurukul Human Metapneumovirus Testing Management System. The problem affects an unknown functionality of the file...

CVE-2025-1954: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument username leads to sql injection. The attack can be...

CVE-2025-1859 PHPGurukul News Portal login.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2025-1859 PHPGurukul News Portal login.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2025-1842

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1842 FITSTATS Technologies AthleteMonitoring login.php cross site scripting

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1842

CVE-2025-1842 affects FITSTATS Technologies AthleteMonitoring (up to version 20250302). The vulnerability is a cross-site scripting flaw in the /login.php login flow caused by manipulation of the username parameter in user input. It is exploitable remotely, and publicly disclosed exploits exist. ...

PT-2025-9283

Name of the Vulnerable Software and Affected Versions PHPGurukul News Portal version 4.1 Description A critical issue has been found in the processing of the file /login.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely. Recommendations Fo...

CVE-2025-1842: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1859: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

PT-2025-9236

Name of the Vulnerable Software and Affected Versions AthleteMonitoring up to 20250302 Description A problematic vulnerability was found in AthleteMonitoring, affecting the /login.php file. The issue is related to the manipulation of the username argument, which leads to cross-site scripting. Thi...

CVE-2022-3583

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-12964

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2024-10509

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-8569

A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file user-login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely...