39423 matches found
CVE-2025-8934 1000 Projects Sales Management System sales.php cross site scripting
A vulnerability has been found in 1000 Projects Sales Management System 1.0. Affected is an unknown function of the file /sales.php. The manipulation of the argument select2112 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2025-8934 1000 Projects Sales Management System sales.php cross site scripting
A vulnerability has been found in 1000 Projects Sales Management System 1.0. Affected is an unknown function of the file /sales.php. The manipulation of the argument select2112 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2025-8933 1000 Projects Sales Management System sales.php cross site scripting
A vulnerability was identified in 1000 Projects Sales Management System 1.0. This issue affects some unknown processing of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
CVE-2025-8932
A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...
CVE-2025-8932
A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...
CVE-2025-8932 1000 Projects Sales Management System sales.php sql injection
A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...
CVE-2025-8932
CVE-2025-8932 affects 1000 Projects Sales Management System 1.0. A SQL injection exists in the code path handling the /superstore/admin/sales.php file, caused by manipulating the ssalescat parameter. The vulnerability is remotely exploitable and has been publicly disclosed. Several connected sour...
CVE-2025-8931 code-projects Medical Store Management System ChangePassword.java sql injection
A vulnerability was determined in code-projects Medical Store Management System 1.0. Affected is an unknown function of the file ChangePassword.java. The manipulation of the argument newPassTxt leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
PHPGurukul Hospital Management System 安全漏洞
Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter docfees in the file /admin/edit-doctor.php. An...
Code-Projects Hostel Management System 安全漏洞
Hostel Management System is a hostel management system. Hostel Management System suffers from an improper authentication vulnerability that originates from a misbehavior of the file hostelmanage.exe that results in improper authentication, no details of the vulnerability are available at this tim...
PT-2025-33130 · Projectworlds · Visitor Management System
Name of the Vulnerable Software and Affected Versions: projectworlds Visitor Management System version 1.0 Description: A vulnerability exists in projectworlds Visitor Management System 1.0, affecting the processing of the /query data.php file. Manipulation of the dateF/dateP argument results in ...
PT-2025-33299 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: Hostel Management System version 1.0 Description: A vulnerability exists in the Login component of Hostel Management System 1.0, specifically within the hostel manage.exe file. This issue results in improper authentication and allows for loca...
CVE-2025-8955: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...
CVE-2025-8950: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /Recruitment/index.php?page=viewvacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has...
Projectworlds Visitor Management System 注入漏洞
Visitor Management System is a visitor access management system. The Visitor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /front.php. An attacker can exploit this...
CVE-2025-8931: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Medical Store Management System 1.0. Affected is an unknown function of the file ChangePassword.java. The manipulation of the argument newPassTxt leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2025-8948: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /front.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...
1000 Projects Sales Management System 注入漏洞
1000 Projects Sales Management System is an open source sales management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Sales Management System, which originates from a SQL injection due to incorrect operation of parameter select2 in file...
1000 Projects Sales Management System 安全漏洞
1000 Projects Sales Management System is an open source sales management system from 1000 Projects. A security vulnerability exists in version 1.0 of the 1000 Projects Sales Management System, which is caused by an SQL injection due to misuse of the parameter salescat in the file...
PT-2025-33113 · Unknown · 1000 Projects Sales Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Sales Management System version 1.0 Description: A cross site scripting issue exists due to the manipulation of the ssalescat argument in the processing of the /superstore/admin/sales.php file. The attack can be initiated remote...