PT-2025-35444

Name of the Vulnerable Software and Affected Versions: Campcodes/SourceCodester Courier Management System version 1.0 Description: A security flaw has been discovered in the Signup function of the /ajax.php file, which results in SQL injection. Manipulation of the lastname argument can initiate t...

PT-2025-35460

Name of the Vulnerable Software and Affected Versions: itsourcecode Sports Management System version 1.0 Description: A SQL injection issue exists due to manipulation of the code argument in an unknown function of the /Admin/facilitator.php file. Remote exploitation is possible. The exploit has...

PT-2025-35461

Name of the Vulnerable Software and Affected Versions: itsourcecode Sports Management System version 1.0 Description: A SQL injection issue exists due to the manipulation of the code argument. This can be exploited remotely via the /Admin/sporttype.php file and an unknown function. The exploit ha...

Chemical Inventory Management System 安全漏洞

Chemical Inventory Management System is a software with simplified tracking and management of laboratory items by Deepak Misal Individual Developer. A security vulnerability exists in Chemical Inventory Management System version 1.0, which stems from a SQL injection due to incorrect manipulation ...

SourceCodester Eye Clinic Management System 安全漏洞

SourceCodester Eye Clinic Management System is a SourceCodester open source eye clinic management system. A security vulnerability exists in SourceCodester Eye Clinic Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter Search in the fil...

PT-2025-35436

Name of the Vulnerable Software and Affected Versions: Khanakag-17 Library Management System affected versions not specified Description: A cross-site scripting issue exists in Khanakag-17 Library Management System. The vulnerability is related to the manipulation of the msg argument of the...

PT-2025-35468

Name of the Vulnerable Software and Affected Versions: itsourcecode Sports Management System version 1.0 Description: A vulnerability exists in itsourcecode Sports Management System 1.0. The manipulation of the code argument in the file /Admin/mode.php can lead to SQL injection. The attack can be...

PT-2025-35509

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A SQL injection issue exists in the Setting Handler component of the software. The issue is located in the /setting/admin.php file, within an unknown function. Manipulation of...

itsourcecode Sports Management System 安全漏洞

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /Admin/resultdetails.php. An attacker can exploit this vulnerabili...

itsourcecode Sports Management System 安全漏洞

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter code in the file /Admin/mode.php. An attacker can exploit this vulnerability...

CampCodes School Log Management System 安全漏洞

CampCodes School Log Management System is a school log management system from CampCodes Philippines. A security vulnerability exists in CampCodes School Log Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of parameter idno in file...

CampCodes Courier Management System 安全漏洞

CampCodes Courier Management System is a courier management system from CampCodes Philippines. A security vulnerability exists in CampCodes Courier Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter email in file/ajax.php...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in parameter mid in file /edashboard/eallinfo.php. An attacker can exploit this...

CVE-2025-9746

A vulnerability was detected in Campcodes Hospital Management System 1.0. This affects an unknown function of the file /admin/edit-doctor-specialization.php of the component Edit Doctor Specialization Page. The manipulation results in cross site scripting. The attack may be launched remotely. The...

CVE-2025-9746

A vulnerability was detected in Campcodes Hospital Management System 1.0. This affects an unknown function of the file /admin/edit-doctor-specialization.php of the component Edit Doctor Specialization Page. The manipulation results in cross site scripting. The attack may be launched remotely. The...

CVE-2025-9746

CVE-2025-9746 affects Campcodes Hospital Management System 1.0. The vulnerability is a cross-site scripting (XSS) in the admin/edit-doctor-specialization.php page caused by manipulation of an element on the Edit Doctor Specialization Page. It can be exploited remotely, and an exploit/PoC is publi...

CVE-2025-9746 Campcodes Hospital Management System Edit Doctor Specialization edit-doctor-specialization.php cross site scripting

A vulnerability was detected in Campcodes Hospital Management System 1.0. This affects an unknown function of the file /admin/edit-doctor-specialization.php of the component Edit Doctor Specialization Page. The manipulation results in cross site scripting. The attack may be launched remotely. The...

CVE-2025-9730

A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument userid results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-9730

A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument userid results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-9730 itsourcecode Apartment Management System updateProfile.php sql injection

A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument userid results in sql injection. It is possible to launch the attack remotely. The exploit has been made...