CVE-2022-33075

CVE-2022-33075 Exploit Title: Zoo Management System 1.0 - Stored Cross-Site-Scripting XSS Date: 05/26/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.htm...

CVE-2024-23747

CVE-2024-23747 The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference IDOR vulnerability. PoC This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URL. Bymanipulating...

CVE-2022-43144-Stored-XSS

CVE-2022-43144 : Stored-XSS Description A cross-site scripting XSS vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Impact Allowing an attacker to hijack the user's session and take over the account. To exploit this...

CVE-2024-34226

Visitor Management System 1.0 Submitter: Kha Do Vulnerability SQL injection Description SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters. Affected compone...

CVE-2020-25270

CVE-2020-25270 PHPGurukul hostel-management-system 2.1은 Guardian Name, Guardian Relation, Guardian Contact no, Address, City를 통해 XSS를 허용합니다. 공급업체 - PHPGurukul 제품 -https://phpgurukul.com/hostel-management-system V2.1 취약점 유형 - 크로스 사이트 스크립팅 XSS 추가 정보 - XSS는 양쪽에서 트리거되며, 사용자는 관리자 쿠키를 탈취하여 관리자 권한을 상승시킬...

CVE-2024-40443

CVE-2024-40443 CVE-2024-40443 - A SQL Injection vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary SQL commands...

CVE-2022-40471

CVE-2022-40471 Clinic's Patient Management System v 1.0의 무제한 파일 업로드 취약점을 통한 원격 코드 실행 기술 설명: Clinic's Patient Management System v 1.0의 원격 코드 실행 취약점으로 인해 공격자는 users.php의 프로필 사진 업로드 기능을 통해 임의의 PHP 웹쉘을 업로드할 수 있습니다. 영향을 받는 구성 요소 - 소스 코드 다음 소스 코드에서 개발자가 특정 확장자를 제한하지 않고 모든 미디어 파일을 직접 업로드하도록 허용하는 것을 볼 수...

CVE-2024-48246

CVE-2024-48246 Vehicle Management System 1.0 - 저장형 크로스 사이트 스크립팅 XSS 설명 Vehicle Management System 1.0은 /vehicle-management/booking.php의 Name 매개변수에 저장형 크로스 사이트 스크립팅 XSS 취약점을 포함하고 있습니다. 악의적인 공격자는 Name 필드에 악성 페이로드를 주입할 수 있으며, 이는 관리자가 /vehicle-management/bookinglist.php에서 예약 목록을 볼 때 저장되고 실행됩니다. 이로 인해 ...

CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Vulnerability Description Joomla is an open-source content management system CMS, written in PHP, supporting multiple database systems such as MySQL, MSSQL, and PostgreSQL. Improper access restrictions lead to unauthorized...

Electrolink-FM-DAB-TV

Electrolink-FM-DAB-TV For CVE-2025-51040 Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 Description Electrolink FM/DAB/TV Transmitter web management...

CVE-2022-30887

CVE-2022-30887 Pharmacy Management System 1.0 Shell Upload This application built by Mayurik Pharmacy management system project in PHP has been developed to improve the accuracy and efficiency of pharmaceutical stores through security and management. In short, it is a product inventory applicatio...

CVE-2024-10605

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: file/request.php Vulnerability Description: There is a Cross Site Request Forgery on this endpoint...

CVE-2025-25964

CVE-2025-25964: SQL Injection in School Information Management System v1.0 Introduction In today's digital landscape, SQL Injection SQLi remains one of the most common and dangerous vulnerabilities found in web applications. This blog post discusses a critical SQL Injection vulnerability...

College-Management-System-course_code-SQL-Injection-Authenticated

College Management System - 'coursecode' SQL Injection Authenticated 1. Description: College Management System 1.0 allows SQL Injection via parameter 'coursecode' in /College-Management-System/admin/asign-single-student-subjects.php. Exploiting this issue could allow an attacker to compromise the...

CVE-2023-49979

CVE-2023-49979 Best Student Management System v1.0 - Incorrect Access Control - Directory Listing Description : A directory listing vulnerability in Best Student Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring...

CVE-2022-30512

CVE-2022-30512 School Dormitory Management System 1.0 - Unauthenticated SQL Injection Exploit Title: School Dormitory Management System 1.0 - Unauthenticated SQL Injection Date: 2022-05-25 CVE: CVE-2022-30512 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/...

CVE-2023-34632

CVE-2023-34632 Reflected XSS in 1000projects Book Management System 1.0 CVE-2023-34632 Reflected Cross-Site Scripting XSS in 1000projects Book Management System 1.0 Description A Reflected Cross-Site Scripting XSS vulnerability was discovered in 1000projects Book Management System version 1.0. Th...

CVE-2025-56605

CVE-2025-56605 XSS 교차 사이트 스크립팅 취약점 CVE-2025-56605 — Event Management System 1.0의 반사형 XSS 설명: register.php의 PuneethReddyHC/event-management 1.0에 반사형 XSS 취약점이 존재합니다. mobile POST 매개변수가 부적절하게 검증되어 응답에 그대로 반영되며, 임의의 JavaScript 코드 주입이 가능합니다. CVE ID: CVE-2025-56605 발견자: Isroil Mustafoqulov 취약점 유형: 반사형 X...

CVE-2023-43144

CVE-2023-43144 설명 Assets Management System 1.0은 delete.php의 id 매개변수를 통해 SQL 인젝션에 취약합니다. PoC root@kitploit: sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch 코드 검토 delete.php root@kitploit: ?php include 'core/init.php'; $id = $GET'id';...

CVE-2026-54343

Frappe LMS versions prior to 2.52.1 are affected by a path traversal vulnerability in the SCORMRenderer.render function within lms/page_renderers.py. The renderer constructs and opens a server-side file path without verifying that the resolved path remains within the public/scorm directory, allow...