PT-2025-35461

Name of the Vulnerable Software and Affected Versions: itsourcecode Sports Management System version 1.0 Description: A SQL injection issue exists due to the manipulation of the code argument. This can be exploited remotely via the /Admin/sporttype.php file and an unknown function. The exploit ha...

Library Management System 安全漏洞

Library Management System is a library management system with QR code for attendance and automatic generation of library cards by King Albaracin Individual Developer. A security vulnerability exists in Library Management System, which is a result of cross-site scripting due to an incorrect...

PT-2025-35459

Name of the Vulnerable Software and Affected Versions: itsourcecode Sports Management System version 1.0 Description: A vulnerability exists in itsourcecode Sports Management System 1.0. The issue involves a SQL injection affecting an unknown function within the /Admin/tournament details.php file...

Sports Management System /login.php File SQL Injection Vulnerability

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that originates in the /login.php file that does not securely filter the User parameter. An attacker can exploit this vulnerability by constructing malicious SQL statements...

CVE-2025-9763: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /studentsignup.php. The manipulation of the argument Username results in sql injection. The attack can be launched remotely. The exploit is now public and may be...

CVE-2025-9759: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2025-9766: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/facilitator.php. Performing manipulation of the argument code results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

CVE-2025-9786: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /teachersignup.php. Performing manipulation of the argument firstname results in sql injection. The attack can be initiated remotely. The exploit has been made public and coul...

CVE-2025-9792: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /edashboard/eallinfo.php. Such manipulation of the argument mid leads to sql injection. The attack can be executed remotely. The exploit has been...

PT-2025-35444

Name of the Vulnerable Software and Affected Versions: Campcodes/SourceCodester Courier Management System version 1.0 Description: A security flaw has been discovered in the Signup function of the /ajax.php file, which results in SQL injection. Manipulation of the lastname argument can initiate t...

The vulnerability of the SLD component of the SAP Business One resource management system allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SLD component in the SAP Business One resource management system is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality, integrity, and accessibility of the protected informatio...

PT-2025-35460

Name of the Vulnerable Software and Affected Versions: itsourcecode Sports Management System version 1.0 Description: A SQL injection issue exists due to manipulation of the code argument in an unknown function of the /Admin/facilitator.php file. Remote exploitation is possible. The exploit has...

CVE-2025-9753: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name Mobile No results in cross site...

PT-2025-35436

Name of the Vulnerable Software and Affected Versions: Khanakag-17 Library Management System affected versions not specified Description: A cross-site scripting issue exists in Khanakag-17 Library Management System. The vulnerability is related to the manipulation of the msg argument of the...

SourceCodester Eye Clinic Management System 安全漏洞

SourceCodester Eye Clinic Management System is a SourceCodester open source eye clinic management system. A security vulnerability exists in SourceCodester Eye Clinic Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter Search in the fil...

CVE-2025-9771: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Eye Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file /main/searchindexDiagnosis.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack...

CVE-2025-9767: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /Admin/sporttype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and m...

CVE-2025-9765: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Sports Management System 1.0. The affected element is an unknown function of the file /Admin/tournamentdetails.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...

CVE-2025-9768: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of the argument code leads to sql injection. The attack is possible to be carried out remotely...

CVE-2025-9756: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul User Management System 1.0. This impacts an unknown function of the file /admin/change-emailid.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...