PT-2025-34662 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Hospital Management System version 4.0 Description: The phpgurukul Hospital Management System is susceptible to SQL Injection in the about-us.php file through the pagetitle parameter. Recommendations: As a temporary workaround,...

CVE-2025-56216

The phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection within the about-us.php file. The root cause is a lack of validation for externally-entered SQL statements provided via the pagetitle parameter. An attacker can exploit this flaw to execute unauthorized SQL commands and ...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /owner/addowner.php. An attacker can exploit this...

CVE-2025-9419: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /unit/addunit.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be...

CVE-2025-56215: Improper Neutralization of Special Elements used in an SQL Command

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter...

CVE-2025-56215

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter...

CVE-2025-56214

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter...

CVE-2025-56212: Improper Neutralization of Special Elements used in an SQL Command

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter...

CVE-2025-9421: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Apartment Management System 1.0. This affects an unknown function of the file /complain/addcomplain.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public an...

CVE-2025-9418: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /owner/addowner.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2025-56214

The phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection due to a lack of validation for externally entered SQL statements. The flaw exists in the index.php file via the username parameter. This vulnerability allows for unauthorized database access or manipulation. As a tempor...

itsourcecode Online Tour and Travel Management System 安全漏洞

itsourcecode Online Tour and Travel Management System is an open source online tour and travel management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which is caused by a SQL injection due to misuse of the...

PT-2025-34713 · Itsourcecode · Apartment Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A flaw exists in itsourcecode Apartment Management System 1.0 that allows for SQL injection. The issue is located in the /floor/addfloor.php file, where manipulation of the hdn...

PT-2025-34704 · Itsourcecode · Apartment Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A SQL injection weakness exists due to improper processing of the ID argument in the /employee/addemployee.php file. This manipulation can be initiated remotely. The exploit ha...

PHPGurukul Hospital Management System 安全漏洞

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the pagetitle parameter of contact.php. An attacker can exploit this...

CVE-2025-9417: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /employee/addemployee.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter hdnid in the file /floor/addfloor.php. An attacker can exploit th...

CVE-2025-56216: Improper Neutralization of Special Elements used in an SQL Command

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /complain/addcomplain.php. An attacker can exploit...

CVE-2025-56215

The phpgurukul Hospital Management System version 4.0 is vulnerable to SQL Injection within the contact.php file. The root cause is a lack of validation for externally entered SQL statements in the pagetitle parameter. An attacker can exploit this flaw to execute unauthorized SQL commands and ste...