33617 matches found
EUVD-2025-37466
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...
CVE-2025-12607
A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /managepayment.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...
EUVD-2025-37446
A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the file /loadfields.php. The manipulation of the argument loanid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...
EUVD-2025-37464
A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /managepayment.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...
CVE-2025-12607
CVE-2025-12607 affects itsourcecode Online Loan Management System 1.0; the vulnerability lies in the /manage_payment.php file where manipulation of the ID argument enables SQL injection. It is exploitable remotely, with public exploit availability. Multiple connected sources corroborate the issue...
CVE-2025-63446
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addvendor.php...
itsourcecode Online Loan Management System SQL注入漏洞
itsourcecode Online Loan Management System is an online loan management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Loan Management System, which stems from incorrect manipulation of the parameter ID in the file /manageuser.php,...
Water-Management-System 安全漏洞
Water-Management-System is an inventory management system by the individual developer Dikshant Naik. A security vulnerability exists in Water-Management-System version 1.0, which originates from cross-site scripting in the file /addvendor.php...
Water-Management-System 安全漏洞
Water-Management-System is an inventory management system by the individual developer Dikshant Naik. A security vulnerability exists in Water-Management-System version 1.0, which originates from a cross-site scripting vulnerability in the file /addcustomer.php...
CVE-2025-63448
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /editproduct.php?id=1...
PT-2025-44776
Name of the Vulnerable Software and Affected Versions Water Management System version 1.0 Description Water Management System version 1.0 is susceptible to Cross Site Scripting XSS within the /orders.php endpoint. The issue allows for the injection of malicious scripts through this endpoint...
CVE-2025-63446
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.php. Root cause details are not fully disclosed beyond the endpoint name; CVSS v3.1 base score 6.1 (AV:N, AC:L, PR:N, UI:R, S:C, C:L, I:L, A:N). Exploitation is mentioned as PoC in one source, but exploitable ...
CVE-2025-63449
CVE-2025-63449 affects Water Management System v1.0, with a Cross Site Scripting (XSS) flaw in /orders.php. The issue is described across multiple connected sources, indicating the vulnerability stems from input handling in that endpoint and can enable injection of malicious scripts. The CVSS v3....
CVE-2025-63447
Water Management System v1.0 is affected by a Cross Site Scripting (XSS) vulnerability in the /add_customer.php endpoint. The issue is documented across multiple sources (NVD, Red Hat, EUVD, CIRCL, CVE list, CNNVD) and is generally described as an XSS in that endpoint. The root cause is not expli...
CVE-2025-63443
School Management System PHP v1.0 is vulnerable to Cross Site Scripting XSS in /login.php via the password parameter...
Water-Management-System 安全漏洞
Water-Management-System is an inventory management system by the individual developer Dikshant Naik. A security vulnerability exists in Water-Management-System version 1.0, which originates from cross-site scripting in the file /editproduct.php?id=1...
CVE-2025-63447
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...
school-management-system 安全漏洞
school-management-system is a PHP school management system for schools or small organizations developed by Shubham kumar, an individual developer. A security vulnerability exists in school-management-system version 1.0, which stems from an unvalidated parameter password in /login.php, which could...