CVE-2025-65337

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...

CVE-2025-65340

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php...

CVE-2025-65340

CVE-2025-65340 affects Kishan0725 Hospital Management System 4.0: a SQL injection vulnerability in /betweendates-detailsreports.php. The CVSS v3.1 base score is 9.8 (CRITICAL) with high impact on confidentiality, integrity, and availability. Connected sources confirm the vulnerability but do not ...

CVE-2025-69942

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

CVE-2025-69942

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

CVE-2025-65337

CVE-2025-65337 affects Sourcecodester’s Fantastic Blog CMS 1.0 . The vulnerability is a Cross Site Scripting (XSS) flaw in the file pageEditMember.php triggered via the address field. The documented impact is user-facing XSS; no exploitation details or confirmed mitigations are provided in the su...

PT-2026-65702

A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...

PT-2026-65704

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment overall answer endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

CVE-2025-67406

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

PT-2026-65711

An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments...

CVE-2025-69945

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1...

CVE-2025-69943

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...

CVE-2025-69944

CVE-2025-69944 affects Kishan0725 Hospital Management System 4.0. The vulnerability is a SQL injection in view-medhistory.php via the viewid parameter. The CVSS 3.1 base score is 7.3 (HIGH) with Network attack vector, low complexity, no privileges, and no user interaction required. Connected sour...

CVE-2025-69945

The vulnerability is CVE-2025-69945 affecting Kishan0725 Hospital Management System 4.0, with a SQL Injection flaw in the web endpoint /doctor/edit-patient.php?editid=1. According to the provided data, the CVSS v3.1 base score is 7.3 (HIGH) with Network attack vector, Low confidentiality/integrit...

CVE-2025-69949

CVE-2025-69949 affects Kishan0725 Hospital Management System 4.0. The vulnerability is a SQL Injection in check_availability.php exploitable via the parameters emailid and email. The CVSS 3.1 base score is 7.3 (High) with network attack vector, low attack complexity, no privileges required, and n...

CVE-2025-69942

CVE-2025-69942 affects kishan0725 Hospital Management System 4.0 and is described as a SQL Injection vulnerability in the endpoint /hms/doctor/view-patient.php?viewid=1. The connected sources provide explicit vulnerability details (SQLi in the listed path) and a CVSS 3.1 vector with base score 9....

CVE-2025-65340

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php...

EUVD-2025-210530

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php...

CVE-2026-65881

Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle 3.1.1 - The default configuration of the extension allowed read access and password reset of CMS accounts...

EUVD-2026-49791

Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle 3.1.1 - The default configuration of the extension allowed read access and password reset of CMS accounts...