2582 matches found
CVE-2025-6467: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...
CVE-2025-6407 Campcodes Online Hospital Management System user-login.php sql injection
A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /user-login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2025-6407 Campcodes Online Hospital Management System user-login.php sql injection
A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /user-login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2025-6407: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /user-login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2025-5716 SourceCodester Open Source Clinic Management System login.php sql injection
A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
CVE-2025-5716: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
CVE-2025-5604
A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit ha...
CVE-2025-5604 Campcodes Hospital Management System user-login.php sql injection
A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit ha...
CVE-2025-5604
CVE-2025-5604 affects Campcodes Hospital Management System 1.0. The vulnerability is a SQL injection in the file /user-login.php triggered by manipulating the Username parameter. It is exploitable remotely over a network, with exploitation information publicly disclosed in the provided documents....
CVE-2025-5580 CodeAstro Real Estate Management System login.php sql injection
A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-5580 CodeAstro Real Estate Management System login.php sql injection
A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-5580
CodeAstro Real Estate Management System 1.0 contains a SQL injection vulnerability in the login flow, caused by improper handling of the email parameter in /login.php. The issue is exploitable remotely and has been publicly disclosed. Multiple independent sources (NVD/NVD-derived entries, Red Hat...
CVE-2025-5580: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-5604: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit ha...
PT-2025-23787 · Unknown · Codeastro Real Estate Management System
Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /login.php. The manipulation of the email argument leads to SQL injection. It is possible to...
PT-2025-23839 · Unknown · Campcodes Online Hospital Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /user-login.php. The manipulation of the Username argument leads to SQL injection. The...
CVE-2025-5369: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...
CVE-2025-5216: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
PT-2025-22945 · Unknown · Phpgurukul Student Record System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.20 Description: A critical vulnerability was found in the PHPGurukul Student Record System, affecting the file /login.php. The manipulation of the ID argument leads to SQL injection. The attack can b...
