33616 matches found
CVE-2024-44658
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php...
Hospital Management System 安全漏洞
Hospital Management System is a hospital management software by Pon Aravind Boominathan Individual Developer. A security vulnerability exists in Hospital Management System version v4, which stems from an insecure direct object reference in the Appointment Cancellation feature that could lead to...
CVE-2025-63514
kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...
PT-2025-47367
Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4 Description The software contains an Insecure Direct Object Reference IDOR issue within the appointment cancellation functionality. This allows potential unauthorized access and manipulation of...
EUVD-2025-198036
kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...
SourceCodester Student Grades Management System 代码注入漏洞
SourceCodester Student Grades Management System is a SourceCodester open source student grades management system. A code injection vulnerability exists in SourceCodester Student Grades Management System version 1.0, which stems from an incorrect manipulation of the parameter Remarks in the file...
CVE-2025-63514
kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...
CVE-2025-63513
CVE-2025-63513 affects kishan0725 Hospital Management System v4 with an Insecure Direct Object Reference (IDOR) in the appointment cancellation feature. The vulnerability allows unauthorized access to appointment-related operations without proper authorization checks, per Red Hat and CVE listings...
EUVD-2025-198032
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...
Hospital Management System 安全漏洞
Hospital Management System is a hospital management software by the individual developer Pon Aravind Boominathan. A security vulnerability exists in Hospital Management System that stems from improper handling of the email parameter in appsearch.php, which could lead to cross-site scripting...
CVE-2025-63514
The CVE-2025-63514 entry documents a Cross-Site Scripting (XSS) vulnerability in the kishan0725 Hospital Management System, specifically in the appsearch.php script, exploitable via the email parameter. The PT-2025-47369 report reiterates a user-controlled input in the email parameter leading to ...
PT-2025-47297
Name of the Vulnerable Software and Affected Versions SourceCodester Interview Management System version 1.0 Description A security flaw exists in SourceCodester Interview Management System 1.0. The manipulation of the Question argument in the file /editQuestion.php can lead to cross site...
CVE-2025-63512
Hospital Management System v4 contains an SQL Injection in admin-panel1.php (deleting doctor logic) where the demail input is not sanitized/parameterized before being used in a dynamic SQL query. This could allow an attacker to manipulate the query and affect the database. Public sources consiste...
CVE-2025-63892
A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...
PT-2025-47369
Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System affected versions not specified Description The software contains a Cross-Site Scripting XSS issue in the 'appsearch.php' file. The issue is triggered through the email parameter. This allows for the...
Inventory Management System /admin/login.php File SQL Injection Vulnerability
Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from the useremail parameter not being effectively filtered in the /admin/login.php file. No details of the vulnerability are available at this time...
PT-2025-47337
Name of the Vulnerable Software and Affected Versions Hospital Management System version 4 Description The Hospital Management System version 4 is susceptible to a SQL Injection issue within the admin-panel1.php file, specifically in the doctor deletion functionality. The application does not...
SourceCodester Interview Management System 代码注入漏洞
SourceCodester Interview Management System is a SourceCodester open source interview management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Interview Management System, which stems from an incorrect manipulation of the parameter Question in the file...
CVE-2025-63512
kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...