Lucene search
+L

35835 matches found

Cvelist
Cvelist
•added 2025/09/03 9:02 p.m.•28 views

CVE-2025-9928 projectworlds Travel Management System viewcategory.php sql injection

A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown function of the file /viewcategory.php. Performing manipulation of the argument t1 results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS0.0044EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/09/03 8:32 p.m.•27 views

CVE-2025-9927 projectworlds Travel Management System viewpackage.php sql injection

A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown function of the file /viewpackage.php. Such manipulation of the argument t1 leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might...

7.5CVSS0.00444EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/09/03 8:24 p.m.•11 views

CVE-2025-9792

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /edashboard/eallinfo.php. Such manipulation of the argument mid leads to sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS7.4AI score0.00417EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/03 8:24 p.m.•11 views

CVE-2025-9793

A vulnerability was detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /setting/admin.php of the component Setting Handler. Performing manipulation of the argument ddlBranch results in sql injection. The attack is possible to be carried out...

9.8CVSS7.3AI score0.00417EPSS
SaveExploits1References1
NVD
NVD
•added 2025/09/03 8:15 p.m.•15 views

CVE-2025-9926

A vulnerability was determined in projectworlds Travel Management System 1.0. Impacted is an unknown function of the file /viewsubcategory.php. This manipulation of the argument t1 causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and...

9.8CVSS0.0044EPSS
SaveExploits1References4
OSV
OSV
•added 2025/09/03 8:15 p.m.•19 views

CVE-2025-9926

A vulnerability was determined in projectworlds Travel Management System 1.0. Impacted is an unknown function of the file /viewsubcategory.php. This manipulation of the argument t1 causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and...

9.8CVSS5.7AI score0.0044EPSS
SaveExploits1References4
NVD
NVD
•added 2025/09/03 8:15 p.m.•16 views

CVE-2025-9925

A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS0.00444EPSS
SaveExploits1References4
OSV
OSV
•added 2025/09/03 8:15 p.m.•20 views

CVE-2025-9925

A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS5.8AI score0.00444EPSS
SaveExploits1References4
CVE
CVE
•added 2025/09/03 8:02 p.m.•45 views

CVE-2025-9926

CVE-2025-9926 affects Projectworlds Travel Management System 1.0. A SQL injection vulnerability exists in the file /viewsubcategory.php via the t1 argument, allowing remote exploitation. Multiple connected sources confirm the issue and note that the vulnerability originates from manipulating t1, ...

9.8CVSS7.3AI score0.0044EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2025/09/03 7:32 p.m.•39 views

CVE-2025-9925

CVE-2025-9925 : In projectworlds Travel Management System 1.0, the pid parameter in /detail.php is vulnerable to SQL injection due to improper validation. This enables remote attackers to execute arbitrary SQL, with public exploit availability. Remediation guidance from PT Security suggests restr...

9.8CVSS7.4AI score0.00444EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2025/09/03 7:15 p.m.•15 views

CVE-2025-9924

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.php. The manipulation of the argument t2 leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...

9.8CVSS0.00444EPSS
SaveExploits1References4
OSV
OSV
•added 2025/09/03 7:15 p.m.•14 views

CVE-2025-9924

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.php. The manipulation of the argument t2 leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...

9.8CVSS5.6AI score0.00444EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/09/03 6:32 p.m.•31 views

CVE-2025-9924 projectworlds Travel Management System enquiry.php sql injection

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.php. The manipulation of the argument t2 leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...

7.5CVSS0.00444EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/09/03 6:32 p.m.•4 views

CVE-2025-9924 projectworlds Travel Management System enquiry.php sql injection

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.php. The manipulation of the argument t2 leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...

7.5CVSS6.8AI score0.00444EPSS
SaveExploits1References4
NVD
NVD
•added 2025/09/03 3:15 p.m.•12 views

CVE-2025-57151

phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting XSS in admin/userprofile.php via the fullname parameter...

8.8CVSS0.0061EPSS
SaveExploits1References2
OSV
OSV
•added 2025/09/03 3:15 p.m.•10 views

CVE-2025-57150

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting XSS in admin/subcategory.php via the categoryName parameter...

7.2CVSS5.8AI score0.00621EPSS
SaveExploits1References1
OSV
OSV
•added 2025/09/03 3:15 p.m.•12 views

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/03 8:34 a.m.•13 views

CVE-2025-9768

A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of the argument code leads to sql injection. The attack is possible to be carried out remotely...

9.8CVSS7.6AI score0.00447EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/03 7:14 a.m.•13 views

CVE-2025-9766

A vulnerability was found in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/facilitator.php. Performing manipulation of the argument code results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

9.8CVSS7.2AI score0.00596EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/03 7:14 a.m.•15 views

CVE-2025-9767

A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /Admin/sporttype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and m...

9.8CVSS7.7AI score0.00525EPSS
SaveExploits1References1
Rows per page
Query Builder