Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

Microfinance Management System V1.0 SQL Injection Vulnerability Unauthenticated 1. Description: Microfinance Management System allows SQL Injection via parameter 'customernumber' in /mims/updatecustomer.php. Exploiting this issue could allow an attacker to compromise the application, access or...

CVE-2022-41445

CVE-2022-41445 Cross Site Scripting in Teacher's Record Management System using CodeIgnitor Suggested description A cross-site scripting XSS vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected int...

CVE-2026-7229-SQLI

Authenticated SQL Injection in Coaching Management System Allows Database Dump Description A SQL Injection vulnerability exists in the Coaching Management System in PHP. The complaintreply parameter in the admin reply functionality is not properly sanitized before being used in SQL queries. An...

cve-2023-41564-research

CVE-2023-41564 Vulnerability Overview CVE-2023-415641 is a stored XSS vulnerability in the CMS Cockpit = v2.6.3. When a .shtml HTML file is uploaded during file upload, JavaScript is executed the moment the uploaded file is opened. 1: https://nvd.nist.gov/vuln/detail/CVE-2023-41564 Attack Executi...

CVE-2022-41358

Exploit Title: Garage Management System 1.0 - 'categoriesName' - Stored XSS Exploit Author: Sam Wallace Software Link: https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html Version: 1.0 Tested on: Debian ID: CVE-2022-41358 Summary:...

CVE-2022-28078

CVE-2022-28077 Home Owners Collection Management System 1.0 - Reflected XSS Exploit Title: Home Owners Collection Management System 1.0 - Reflected XSS Date: 2022-05-06 CVE: CVE-2022-28078 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2026-92526

A SQL injection vulnerability exists in itsourcecode Leave Management System 1.0 , affecting the ID argument within /module/leave/index.php. An authenticated remote attacker (low privileges required) can manipulate this parameter to execute arbitrary SQL queries, resulting in low impact on confid...

EUVD-2026-81092

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2024-10448

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: /file/delete.php?bid= Vulnerability Description: A Cross Site Request Forgery CSRF vulnerability was...

CVE-2024-34833-payroll-management-system-rce

CVE-2024-34833 Payroll Management System RCE Unauthenticated PoC RCE via file upload for https://www.sourcecodester.com/php/14475/payroll-management-system-using-phpmysql-source-code.html. The filenames have timestamp prepended with a minute accuracy. The script tries to guess the filename using...

CVE-2022-31897

CVE-2022-31897 日期：06/22/2022 漏洞作者：Angelo Pio Amirante 厂商主页：https://www.sourcecodester.com/ 软件链接：https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html 版本：1.0 测试环境：服务器：Windows 10 上的 XAMPP CVE编号：CVE-2022-31897 描述： Zoo Management System 1.0...

CVE-2025-56243

CVE-2025-56243 - Reflected XSS in PuneethReddyHC / Event Management System v1.0 Title: Reflected Cross-Site Scripting XSS via eventid parameter in register.php Vendor / Repository: PuneethReddyHC / event-management Affected Version: 1.0 branch/tag master at the time of testing Reporter: Hafiz...

CVE-2022-30514

CVE-2022-30514 School Dormitory Management System 1.0 - Reflected XSS Exploit Title: School Dormitory Management System 1.0 - Reflected XSS Date: 2022-05-25 CVE: CVE-2022-30514 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2022-33075

CVE-2022-33075 エクスプロイトタイトル: Zoo Management System 1.0 - 格納型クロスサイトスクリプティング XSS 日付: 05/26/2022 エクスプロイト作成者: Angelo Pio Amirante ベンダーホームページ: https://www.sourcecodester.com/ ソフトウェアリンク: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html...

CVE-2026-92364

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

EUVD-2026-80741

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2026-92364 itsourcecode Leave Management System index.php sql injection

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2026-92364

itsourcecode Leave Management System 1.0 is affected by a SQL injection vulnerability in the file /module/employee/index.php, where manipulation of the ID argument allows an attacker to inject SQL commands. The attack can be initiated remotely and requires low privileges (authenticated access), w...

CVE-2023-23279

SQL injection in Canteen Management System v1.0. Bug author: Tuannq Discovered Day: 5/1/2023 Vendors: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html Login account: [email protected]/rootadmin Super Admin account Vulnerability File:...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 Exploit Title: Vehicle Service Management System - 'MyAccount' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...