2593 matches found
CVE-2024-55016: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php...
CVE-2025-12928: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and ma...
CVE-2025-63443: Improper Neutralization of Input During Web Page Generation
School Management System PHP v1.0 is vulnerable to Cross Site Scripting XSS in /login.php via the password parameter...
CVE-2025-61247: Improper Neutralization of Special Elements used in an SQL Command
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php...
PT-2025-42813
Name of the Vulnerable Software and Affected Versions Restaurant Management System DBMS Project version 1.0 Description A SQL injection issue exists in Restaurant Management System DBMS Project version 1.0. This allows manipulation of the application’s database through crafted SQL query strings v...
CVE-2025-60783: Improper Neutralization of Special Elements used in an SQL Command
There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php. The vulnerability allows attackers to manipulate the application's database through specially crafted SQL query strings...
CVE-2025-11601
A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...
CVE-2025-11601: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...
CVE-2025-11424
A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...
CVE-2025-11434
Summary: CVE-2025-11434 affects itsourcecode’s Student Transcript Processing System v1.0, with a SQL injection flaw in the /login.php file via the uname parameter. The issue can be exploited remotely and publicly available exploit code exists. Several sources corroborate the impact and exposure, ...
Itsourcecode Student Transcript Processing System SQL Injection Vulnerability
itsourcecode Student Transcript Processing System is itsourcecode open source a student transcript processing system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Transcript Processing System, which stems from an incorrect manipulation of the parameter uname in the...
CVE-2025-11422: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...
CVE-2025-11424: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...
Code-Projects Web-Based Inventory and POS System Security Vulnerabilities
Code-Projects Web-Based Inventory and POS System is a web-based inventory and POS system from Code-Projects open source. A security vulnerability exists in version 1.0 of the code-projects Web-Based Inventory and POS System, which stems from an incorrect manipulation of the parameter emailid in t...
CVE-2025-11434: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...
CVE-2025-11397
A security flaw has been discovered in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /login.php. Performing manipulation of the argument email results in sql injection. The attack may be initiated remotely. The exploit has been...
EUVD-2006-6443
Malware in sbrugna...
EUVD-2008-4041
Malware in sbrugna...