CVE-2025-9017

A vulnerability has been found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-foreigner-ticket.php. The manipulation of the argument visitorname leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-9017

A vulnerability has been found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-foreigner-ticket.php. The manipulation of the argument visitorname leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-9017

The CVE-2025-9017 issue affects PHPGurukul Zoo Management System 2.1, in the file /admin/add-foreigner-ticket.php where manipulation of the visitorname parameter enables cross-site scripting (XSS). The vulnerability is described as remotely initiable with public exploits disclosed, and affected e...

CVE-2025-9017 PHPGurukul Zoo Management System add-foreigner-ticket.php cross site scripting

A vulnerability has been found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-foreigner-ticket.php. The manipulation of the argument visitorname leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-9010

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9010 itsourcecode Online Tour and Travel Management System booking_report.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-8993

The CVE-2025-8993 entry concerns itsourcecode Online Tour and Travel Management System 1.0. The vulnerability resides in the /admin/expense_report.php file, where manipulation of the from_date parameter enables SQL injection. This flaw could be triggered remotely, and multiple sources confirm tha...

PT-2025-33485 · Projectworlds · Travel Management System

Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /updatesubcategory.php. The manipulation of the...

Projectworlds Travel management System 注入漏洞

Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter t1 in file /addcategory.php. An attacker can exploit this vulnerability to execute...

PT-2025-33476 · Projectworlds · Visitor Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Visitor Management System version 1.0 Description: A vulnerability has been found in projectworlds Visitor Management System 1.0. The manipulation of the argument rid in an unknown function of the file /visitor out.php leads to...

CVE-2025-9010: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-9051: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in projectworlds Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /updatecategory.php. The manipulation of the argument t1 leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...

PT-2025-33483 · Projectworlds · Travel Management System

Name of the Vulnerable Software and Affected Versions: ProjectWorlds Travel Management System version 1.0 Description: A vulnerability exists in ProjectWorlds Travel Management System 1.0 related to SQL injection. The issue affects an unknown functionality within the /updatecategory.php file...

CVE-2025-8993: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/expensereport.php. The manipulation of the argument fromdate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...

The vulnerability of the phMonitor monitoring service in the FortiSIEM security management system allows a attacker to execute arbitrary code and increase their privileges.

The vulnerability of the phMonitor monitoring service of the FortiSIEM security management system is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and enhance their privileges by sending...

CVE-2025-9053: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /updatesubcategory.php. The manipulation of the argument t1/s1 leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publ...

CVE-2025-9024: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

Projectworlds Travel management System 注入漏洞

Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameters t1/s1 in file /updatesubcategory.php. An attacker can exploit this vulnerabili...

CVE-2025-8989: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been...

PT-2025-33450 · Phpgurukul · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A vulnerability exists in PHPGurukul Zoo Management System 2.1, specifically within the /admin/add-foreigner-ticket.php file. Manipulation of the visitorname argument can lead to...