CVE-2023-40992

Hospital Management System version 4 is vulnerable to a SQL injection due to insufficient input validation. The flaw exists in the /Hospital-Management-System-master/func.php file when the password2 parameter is improperly handled. This vulnerability could allow an attacker to execute unauthorize...

CVE-2023-41528

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

CVE-2023-41524

The Student Attendance Management System v1 contains a SQL injection vulnerability. The flaw is caused by the incorrect manipulation of the username parameter within the index.php API endpoint. This vulnerability allows for unauthorized database interaction. As a temporary workaround, it is recom...

CVE-2023-41530

The Hospital Management System v4 is vulnerable to a SQL injection flaw due to improper handling of the app_contact parameter in the appsearch.php file. An attacker could exploit this to interfere with database queries. As a workaround, it is recommended to restrict access to the appsearch.php fi...

CVE-2025-51040

Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2...

CVE-2025-51040

Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2...

Electrolink FM/DAB/TV Transmitter Web Management System 安全漏洞

Electrolink FM/DAB/TV Transmitter Web Management System is a transmitter web management system from Electrolink. A security vulnerability exists in the Electrolink FM/DAB/TV Transmitter Web Management System that originates from the /FrameSetCore.html endpoint that could lead to unauthorized acce...

CVE-2025-8495

A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /admin/editadminquery.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack...

CVE-2025-8494

A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /admin/deletestudent.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

CVE-2025-8493

A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file /admin/editstudentquery.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2025-8433

A vulnerability was found in code-projects Document Management System 1.0 and classified as critical. This issue affects the function unlink of the file /dell.php. The manipulation of the argument ID leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2025-8495

CVE-2025-8495 affects code-projects Intern Membership Management System 1.0. The vulnerability is in an unknown function in the file /admin/edit_admin_query.php; manipulating the Username parameter leads to a remote SQL injection. The exploit has been publicly disclosed, indicating potential in-t...

CVE-2025-8495 code-projects Intern Membership Management System edit_admin_query.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /admin/editadminquery.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack...

CVE-2025-8495 code-projects Intern Membership Management System edit_admin_query.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /admin/editadminquery.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack...

CVE-2025-8494

A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /admin/deletestudent.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

PT-2025-31763 · Code Projects · Intern Membership Management System

Name of the Vulnerable Software and Affected Versions: code-projects Intern Membership Management System version 1.0 Description: A critical vulnerability exists in code-projects Intern Membership Management System 1.0. The vulnerability is located in an unknown function within the /admin/edit...

CVE-2025-8493

A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file /admin/editstudentquery.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2025-8493

A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file /admin/editstudentquery.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2025-8493 code-projects Intern Membership Management System edit_student_query.php sql injection

A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file /admin/editstudentquery.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2025-8493 code-projects Intern Membership Management System edit_student_query.php sql injection

A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file /admin/editstudentquery.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit...