35837 matches found
CVE-2025-9925: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
CVE-2025-57151
phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting XSS in admin/userprofile.php via the fullname parameter...
CVE-2025-9842: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0. This impacts an unknown function of the file /Operator/Search. The manipulation results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used...
CVE-2025-57151
phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting XSS in admin/userprofile.php via the fullname parameter...
PHPGurukul Complaint Management System 安全漏洞
Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the cid parameter of /complaint-details.php. An attacker can exploit this vulnerabili...
PT-2025-35825
Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A vulnerability exists in projectworlds Travel Management System 1.0, affecting unknown code within the /enquiry.php file. The manipulation of the t2 argument can lead to a SQL...
PT-2025-35646
Name of the Vulnerable Software and Affected Versions: Das Parking Management System 停车场管理系统 version 6.2.0 Description: A flaw has been found in Das Parking Management System 停车场管理系统 that causes information disclosure. The issue affects an unknown function of the file /Operator/FindAll. This...
PHPGurukul Complaint Management System 安全漏洞
Complaint Management System is a complaint management system. A cross-site scripting vulnerability exists in Complaint Management System, which stems from a lack of effective filtering and escaping of user-supplied data in the fullname parameter of admin/userprofile.php, for which no detailed...
CVE-2025-9848: Execution After Redirect (EAR)
A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotely. The exploit has been disclosed...
CVE-2025-9843: Exposure of Sensitive Information to an Unauthorized Actor
A flaw has been found in Das Parking Management System 停车场管理系统 6.2.0. Affected is an unknown function of the file /Operator/FindAll. This manipulation causes information disclosure. It is possible to initiate the attack remotely. The exploit has been published and may be used...
CVE-2025-57151: Improper Neutralization of Input During Web Page Generation
phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting XSS in admin/userprofile.php via the fullname parameter...
CVE-2025-57149: Improper Neutralization of Special Elements used in an SQL Command
phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter...
CVE-2025-9919: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploi...
CVE-2025-9841: Unrestricted Upload of File with Dangerous Type
A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit...
PT-2025-35835
Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A vulnerability exists in projectworlds Travel Management System version 1.0. The issue is a SQL injection affecting an unknown function within the /viewpackage.php file. Remote...
CVE-2025-9924: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.php. The manipulation of the argument t2 leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...
CVE-2025-9920: External Control of File Name or Path
A security flaw has been discovered in Campcodes Recruitment Management System 1.0. This impacts the function include of the file /admin/index.php. The manipulation of the argument page results in file inclusion. It is possible to launch the attack remotely. The exploit has been released to the...
CVE-2025-9840
A weakness has been identified in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/gametype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been made available...
CVE-2025-9840
The CVE-2025-9840 issue affects itsourcecode Sports Management System version 1.0, specifically the /Admin/gametype.php file. The root cause is an unsafely handled parameter (code) that allows SQL injection, enabling remote exploitation. Public exploits have been reported, and multiple sources de...
CVE-2025-9840 itsourcecode Sports Management System gametype.php sql injection
A weakness has been identified in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/gametype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been made available...