CVE-2025-3560

A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /product. The manipulation of the argument productname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed...

CVE-2025-29018

A Stored Cross-Site Scripting XSS vulnerability exists in the name parameter of pagesaddacctype.php in Code Astro Internet Banking System 2.0.0...

CVE-2025-29018

A Stored Cross-Site Scripting XSS vulnerability exists in the name parameter of pagesaddacctype.php in Code Astro Internet Banking System 2.0.0...

CVE-2024-46494

A cross-site scripting XSS vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into Name parameter under a comment for an Article...

CodeAstro Internet Banking System 安全漏洞

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A security vulnerability exists in CodeAstro Internet Banking System version 2.0.0, which is caused by stored cross-site scripting in the name parameter...

CVE-2025-29018

A Stored Cross-Site Scripting XSS vulnerability exists in the name parameter of pagesaddacctype.php in Code Astro Internet Banking System 2.0.0...

Seeyon FE Collaborative Office Platform 安全漏洞

Seeyon FE Collaborative Office Platform is a collaborative office platform from China-based Seeyon. A security vulnerability exists in Seeyon FE Collaborative Office Platform version 5.5.2, which stems from an incorrect operation of the parameter Name that can lead to SQL injection...

SourceCodester Web-based Pharmacy Product Management System 注入漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. An injection vulnerability exists in SourceCodester Web-based Pharmacy Product Management System version 1.0, which stems from an incorrect manipulation of the...

typecho 安全漏洞

typecho is a PHP blogging platform for typecho individual developers. It is simple and powerful. A security vulnerability exists in typecho version 1.2.1, which stems from a cross-site scripting vulnerability in the Name parameter...

CVE-2025-3313

A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/add-customer.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit...

PHPGurukul Men Salon Management System 注入漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul Inc. An injection vulnerability exists in PHPGurukul Men Salon Management System version 1.0, which stems from an incorrect manipulation of the parameter Name that can lead to SQL injection...

PHPGurukul Men Salon Management System 注入漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul Inc. An injection vulnerability exists in PHPGurukul Men Salon Management System version 1.0, which stems from an incorrect manipulation of the parameter Name that can lead to SQL injection...

ZendTo 安全漏洞

ZendTo is a web-based file transfer system from ZendTo, Inc. A security vulnerability exists in ZendTo versions 5.24-3 through prior to 6.10-7, which stems from the presence of shell metacharacters in the tmpname parameter, and could lead to the execution of arbitrary commands by an...

CVE-2025-3252

A vulnerability has been found in xujiangfei admintwo 1.0 and classified as problematic. This vulnerability affects unknown code of the file /resource/add. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to...

admintwo 安全漏洞

admintwo is an application by the individual developer xujiangfei. A security vulnerability exists in version 1.0 of admintwo, which stems from an incorrect manipulation of the parameter Name that can lead to cross-site scripting...

Gym Management System 注入漏洞

Gym Management System is a gym management system from SourceCodester. An injection vulnerability exists in Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter username that can lead to SQL injection...

Project Worlds Online Lawyer Management System 注入漏洞

Project Worlds Online Lawyer Management System is an online lawyer management system from Project Worlds, Inc. An injection vulnerability exists in Project Worlds Online Lawyer Management System version 1.0, which stems from an incorrect operation of the parameter firstName that can lead to SQL...

CVE-2025-29208

CodeZips Gym Management System v1.0 is vulnerable to SQL injection in the name parameter within /dashboard/admin/deleteroutine.php...

CVE-2025-29208

CodeZips Gym Management System v1.0 is vulnerable to SQL injection in the name parameter within /dashboard/admin/deleteroutine.php...

Codezips Gym Management System 安全漏洞

Codezips Gym Management System is an open source gym management system from Codezips. A security vulnerability exists in Codezips Gym Management System version 1.0, which originates from an SQL injection in the name parameter of dashboardadmindeleteoutine.php...