itsourcecode Online Loan Management System SQL注入漏洞

itsourcecode Online Loan Management System is an open source online loan management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Loan Management System, which stems from incorrect manipulation of the parameter ID in the file...

itsourcecode Online Loan Management System 安全漏洞

itsourcecode Online Loan Management System is an online loan management system from itsourcecode open source. A security vulnerability exists in version 1.0 of itsourcecode Online Loan Management System, which stems from an incorrect manipulation of the parameter ID in the file /managepayment.php...

Simple-User-Management-System-with-PHP-MySQL 安全漏洞

Simple-User-Management-System-with-PHP-MySQL is a simple user management system built with PHP and MySQL by the individual developer Nababur Rahaman. A security vulnerability exists in Simple-User-Management-System-with-PHP-MySQL version 1.0, which stems from not properly cleaning up user input a...

PT-2025-44775

Name of the Vulnerable Software and Affected Versions Water Management System version 1.0 Description The Water Management System version 1.0 is susceptible to Cross Site Scripting XSS. The issue occurs in the /edit product.php?id=1 API endpoint. The id parameter is potentially vulnerable. XSS...

PT-2025-44774

Name of the Vulnerable Software and Affected Versions Water Management System version 1.0 Description Water Management System version 1.0 is susceptible to Cross Site Scripting XSS attacks. The issue is located in the /add customer.php endpoint. The vulnerability allows attackers to inject...

CVE-2025-63443

School Management System PHP v1.0 is vulnerable to Cross Site Scripting XSS in /login.php via the password parameter...

CVE-2025-63448

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /editproduct.php?id=1...

CVE-2025-63448

Water Management System v1.0 is reported vulnerable to Cross Site Scripting (XSS) in /edit_product.php?id=1. Concrete details appear across multiple sources (NVD, Red Hat, ENISA, CIRCL, CNNVD, CVE Lists) confirming a XSS issue affecting the /edit_product.php endpoint. The CVSS v3.1 base score is ...

CVE-2025-63442

CVE-2025-63442 affects the Simple User Management System with PHP-MySQL v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Profile Section caused by insufficient sanitization of user input that is reflected in the browser. Root cause: inadequate input sanitization for profile dat...

CVE-2025-63446

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addvendor.php...

CVE-2025-63443

CVE-2025-63443 affects School Management System PHP v1.0. The vulnerability is a Cross-Site Scripting (XSS) in the login form, exploitable via the unvalidated/unsanitized password parameter sent to /login.php . The referenced sources consistently describe the issue as an XSS condition stemming fr...

Water-Management-System 安全漏洞

Water-Management-System is an inventory management system by the individual developer Dikshant Naik. A security vulnerability exists in Water-Management-System version 1.0, which stems from the file /orders.php being vulnerable to cross-site scripting attacks...

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

CVE-2025-63442

Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting XSS via the Profile Section. The system fails to properly sanitize user input, allowing attackers to inject and execute arbitrary JavaScript when the input is displayed in the browser...

PT-2025-44771

Name of the Vulnerable Software and Affected Versions Simple User Management System with PHP-MySQL version 1.0 Description The Simple User Management System with PHP-MySQL fails to properly sanitize user input in the Profile Section, allowing attackers to inject and execute arbitrary JavaScript...

CVE-2025-50363

Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting XSS in /maid-hiring.php va the name field...

CVE-2025-63442

Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting XSS via the Profile Section. The system fails to properly sanitize user input, allowing attackers to inject and execute arbitrary JavaScript when the input is displayed in the browser...

CVE-2025-12606 itsourcecode Online Loan Management System manage_borrower.php sql injection

A vulnerability was determined in itsourcecode Online Loan Management System 1.0. This issue affects some unknown processing of the file /manageborrower.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2025-12605

CVE-2025-12605 affects itsourcecode Online Loan Management System 1.0. The vulnerability is an SQL injection in /manage_loan.php caused by manipulation of the ID parameter. It is exploitable remotely and the exploit is publicly available. CVSS shows a critical/high risk across sources (e.g., CVSS...

CVE-2025-12604

A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the file /loadfields.php. The manipulation of the argument loanid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...