CVE-2025-8340

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file filldetails.php of the component Error Message Handler. The manipulation of the argument email leads to cross site scripting...

CVE-2025-8339

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /studentlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

CVE-2025-51044

phpgurukul Nipah virus NiV Testing Management System 1.0 contains a SQL injection vulnerability in the /new-user-testing.php file, due to insufficient validation of user input for the " govtissuedid" parameter...

CVE-2025-8340

CVE-2025-8340 affects Code-Projects Intern Membership Management System 1.0, specifically the Error Message Handler’s fill_details.php. The vulnerability arises from manipulating the email parameter, enabling remote cross-site scripting (XSS). The issue can be exploited remotely and the exploit h...

CVE-2025-8340 code-projects Intern Membership Management System Error Message fill_details.php cross site scripting

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file filldetails.php of the component Error Message Handler. The manipulation of the argument email leads to cross site scripting...

CVE-2025-8339

CVE-2025-8339 affects code-projects Intern Membership Management System 1.0. A SQL injection vulnerability exists in an unknown portion of the file /student_login.php caused by unsafely manipulating the user_name (and password) parameters, enabling remote exploitation. Exploit details are publicl...

CVE-2025-8339 code-projects Intern Membership Management System student_login.php sql injection

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /studentlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

CVE-2025-8339 code-projects Intern Membership Management System student_login.php sql injection

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /studentlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

CS Cart 安全漏洞

CS Cart is an e-commerce system from the US-based company CS Cart. A security vulnerability exists in CS Cart version 4.18.3, which stems from an under-restricted file upload feature that could lead to the execution of arbitrary code...

Code-Projects Intern Membership Management System 安全漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system. A security vulnerability exists in Code-Projects Intern Membership Management System version 1.0, which originates from a cross-site scripting attack due to misuse of the paramete...

PT-2025-31464 · Unknown · Intern Membership Management System

Name of the Vulnerable Software and Affected Versions: Intern Membership Management System version 1.0 Description: A flaw exists in the Error Message Handler component of the software, specifically within the fill details.php file. Manipulation of the email argument can lead to cross-site...

PT-2025-31463 · Unknown · Intern Membership Management System

Name of the Vulnerable Software and Affected Versions: Intern Membership Management System version 1.0 Description: A critical issue exists in Intern Membership Management System 1.0. The vulnerability is due to SQL injection caused by the manipulation of the user name/password argument in the...

CVE-2025-8336 Campcodes Online Recruitment Management System ajax.php sql injection

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=saveuser. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-8334

CVE-2025-8334 describes a SQL injection vulnerability in Campcodes Online Recruitment Management System 1.0. The issue affects a portion of the code handling the file /admin/ajax.php?action=delete_recruitment_status, where the parameter ID can be manipulated to trigger a SQL injection. The vulner...

CVE-2025-8334 Campcodes Online Recruitment Management System ajax.php sql injection

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack m...

CVE-2025-52187

GetProjectsIdea Create School Management System 1.0 is vulnerable to Cross Site Scripting XSS in myprofileupdateform1.php...

CVE-2025-52187

GetProjectsIdea Create School Management System 1.0 is vulnerable to Cross Site Scripting XSS in myprofileupdateform1.php...

CVE-2025-8254

A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /viewparcel.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...