CVE-2025-10834 itsourcecode Open Source Job Portal login.php sql injection

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available a...

CVE-2025-10599

The CVE-2025-10599 affects itsourcecode Web-Based Internet Laboratory Management System 1.0. The vulnerability is a SQL injection in User::AuthenticateUser within login.php triggered by manipulating the user_email parameter. Multiple connected sources confirm the issue and its public exploitation...

PT-2025-37449

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Laundry Management System version 1.0 Description: A security flaw has been discovered that allows for SQL injection. Manipulation of the Username argument in an unknown function of the file /login.php can trigger this...

itsourcecode Online Laundry Management System SQL注入漏洞

itsourcecode Online Laundry Management System is an online laundry management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Laundry Management System, which stems from an incorrect manipulation of the parameter Username in the fil...

CVE-2025-10118

A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

CVE-2025-9751

CVE-2025-9751 affects Campcodes Online Learning Management System 1.0. The issue is a SQL injection in the login flow, triggered by manipulating the Username argument in the file /login.php. It is described as exploitable remotely with publicly available exploits, implying potential remote, unaut...

CVE-2025-9742

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2025-9742 code-projects Human Resource Integrated System login.php sql injection

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2025-9662

A vulnerability was determined in code-projects Simple Grading System 1.0. This affects an unknown function of the file /login.php of the component Admin Panel. Executing manipulation can lead to sql injection. The attack may be performed from a remote location. The exploit has been publicly...

CampCodes Online Shopping System 安全漏洞

CampCodes Online Shopping System is an online shopping system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Online Shopping System, which is caused by a SQL injection due to an incorrect manipulation of the parameter Password in file /login.php...

CVE-2025-9595

A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the file /login.php. The manipulation of the argument uname results in cross site scripting. The attack may be performed from a remote location. The exploit has bee...

Code-Projects Simple Grading System 安全漏洞

Simple Grading System is a simple grading system. Simple Grading System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /login.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

CVE-2025-9595

The CVE-2025-9595 entry concerns code-projects Student Information Management System v1.0. The vulnerability is a cross-site scripting flaw in an unknown function of /login.php triggered by manipulation of the uname argument. It is exploitable remotely and an exploit has been publicly released. T...

CVE-2025-8443

CVE-2025-8443 affects code-projects Online Medicine Guide 1.0. The vulnerability is a SQL injection in login.php via the uname parameter, exploitable remotely; multiple sources describe public disclosure and potential impact. A practical mitigation noted in PT Security documentation is to restric...

CVE-2025-27724

A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability...

PT-2025-31102 · Unknown · Meddream Pacs Premium

Name of the Vulnerable Software and Affected Versions: MedDream PACS Premium version 7.3.3.840 Description: A privilege escalation issue exists in the login.php functionality. An attacker can upload a malicious .php file to gain elevated access. Recommendations: At the moment, there is no...

CVE-2025-7950

CVE-2025-7950 affects code-projects Public Chat Room 1.0. The vulnerability exists in the login.php file where manipulating the Username parameter leads to SQL injection. The issue can be exploited remotely and the exploit has been publicly disclosed, indicating potential for unauthorized access ...

CVE-2025-7950 code-projects Public Chat Room login.php sql injection

A vulnerability was found in code-projects Public Chat Room 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-7925 PHPGurukul Online Banquet Booking System login.php cross site scripting

A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument userlogin/userpassword leads to cross site scripting. The attac...

CVE-2025-7829 code-projects Church Donation System login.php sql injection

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The...