CVE-2025-8274

The CVE-2025-8274 entry concerns Campcodes Online Recruitment Management System 1.0. A SQL injection affects an unknown function exposed at /admin/ajax.php?action=save_recruitment_status via manipulation of the ID parameter. It is remotely exploitable and the exploit has been disclosed publicly. ...

CVE-2025-8185

A vulnerability was found in 1000 Projects ABC Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /getbyid.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

CVE-2025-27800

The Episerver Content Management System CMS by Optimizely was affected by multiple Stored Cross-Site Scripting XSS vulnerabilities. This allowed an authenticated attacker to execute malicious JavaScript code in the victim's browser. The Admin dashboard offered the functionality to add gadgets to...

CVE-2025-8254

A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /viewparcel.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-8254

A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /viewparcel.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-8254

CVE-2025-8254 affects Campcodes Courier Management System 1.0 via SQL injection in the /view_parcel.php file, caused by unsafely handling the ID parameter. The vulnerability is exploitable remotely and has public exploits; risk is described as critical by multiple sources. Attacks could disclose ...

CVE-2025-8254 Campcodes Courier Management System view_parcel.php sql injection

A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /viewparcel.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-8254 Campcodes Courier Management System view_parcel.php sql injection

A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /viewparcel.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2025-31141 · Unknown · Phpgurukul Bank Locker Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1 Description: Improper session invalidation in the /banker/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session invalidati...

CVE-2025-50494

The PHPGurukul Car Washing Management System v1.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /doctor/change-password.php component. This flaw allows an attacker to hijack active sessions, potentially gaining unauthorized access to the system. Remediati...

CVE-2025-50492

PHPGurukul e-Diary Management System v1 is affected by a session hijacking vulnerability due to improper session invalidation in the /edms/change-password.php component. This flaw could allow an attacker to hijack active user sessions. To mitigate this risk, users are recommended to apply updates...

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

CVE-2025-50491

The PHPGurukul Bank Locker Management System v1 is vulnerable to a session hijacking attack due to improper session invalidation in the /banker/change-password.php component. Exploitation of this flaw allows attackers to hijack active user sessions. Remediation involves addressing the session inv...

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

CVE-2025-50487

The PHPGurukul Blood Bank & Donor Management System v2.4 is vulnerable to a session hijacking attack due to improper session invalidation in the /bbdms/change-password.php component. To mitigate this risk, it is recommended to ensure that proper session invalidation mechanisms are implemented wit...

CVE-2025-50488

The PHPGurukul Online Library Management System v3.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /library/change-password.php component. An attacker can exploit this flaw to hijack active sessions. Remediation requires applying updates to address the se...

Optimizely Episerver Content Management System 安全漏洞

Optimizely Episerver Content Management System is an enterprise-class content management system from Optimizely, Inc. A security vulnerability exists in the Optimizely Episerver Content Management System that stems from stored cross-site scripting that allows an authenticated attacker to execute...

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

PT-2025-31129 · Phpgurukul · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: Improper session invalidation in the component /elms/emp-changepassword.php allows attackers to execute a session hijacking attack. Recommendations: Address the session...

Optimizely Episerver Content Management System 安全漏洞

Optimizely Episerver Content Management System is an enterprise-class content management system from Optimizely, Inc. A security vulnerability exists in the Optimizely Episerver Content Management System that stems from stored cross-site scripting that allows an authenticated attacker to execute...