216 matches found
CVE-2025-25354
A SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactnumber POST request parameter...
CVE-2025-25389
A SQL Injection vulnerability was found in /admin/forgot-password.php in Phpgurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter...
PT-2025-3437 · Unknown · Safety Production Process Management System
Name of the Vulnerable Software and Affected Versions: Safety production process management system version 1.0 Description: The issue allows a remote attacker to escalate privileges, execute arbitrary code, and obtain sensitive information via the password and account number parameters...
Simple Chat System 安全漏洞
Simple Chat System is a simple chat system by the individual developer nurhodelta17. A security vulnerability exists in Simple Chat System version 1.0, which stems from an incorrect manipulation of the parameters name/email/password/number that can lead to SQL injection...
PT-2024-17575 · WordPress · Woocommerce Additional Fees On Checkout
Name of the Vulnerable Software and Affected Versions: WooCommerce Additional Fees On Checkout Free plugin for WordPress versions up to, and including, 1.4.7 Description: The issue is related to Reflected Cross-Site Scripting via the number parameter due to insufficient input sanitization and...
Code-Projects Simple Car Rental System 注入漏洞
Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from incorrect manipulation of the parameters fname, idno, gender, email, phone, and location can...
CVE-2024-10136
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manageinvoice.php. The manipulation of the argument invoicenumber leads to sql injection. The attack can be initiated remotely. The...
PHPGurukul Boat Booking System 跨站脚本漏洞
PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A cross-site scripting vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which stems from a cross-site scripting flaw in the phonenumber parameter in the book-boat.php?bid=1 page of the Book a Boat...
Pharmacy Management System 安全漏洞
Pharmacy Management System MPMS is a multilingual pharmacy management system by Mayuri K. Individual developer. A security vulnerability exists in Pharmacy Management System version 1.0, which originates from an SQL injection vulnerability contained in the invoicenumber parameter of the...
CVE-2024-42562
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at preview.php...
CVE-2024-7942
A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the argument phonenumber leads to cross site scripting. The attack can be initiated remotely. The exploi...
pharmacy-manage-system 安全漏洞
pharmacy-manage-system is a pharmacy management system by Krishna Aryal, an individual developer. A security vulnerability exists in pharmacy-manage-system, which stems from an SQL injection vulnerability in the invoicenumber parameter of the salesreport.php page...
PT-2024-38754 · Genexis · Genexis Tilgin Home Gateway
Name of the Vulnerable Software and Affected Versions: Genexis Tilgin Home Gateway version 322 AS0500-03 05 13 05 Description: This issue affects some unknown processing of the file "/vood/cgi-bin/vood view.cgi?lang=EN&act=user/spec...
pharmacy-manage-system 安全漏洞
pharmacy-manage-system is a pharmacy management system by Krishna Aryal, an individual developer. A security vulnerability exists in pharmacy-manage-system due to an SQL injection vulnerability in the invoicenumber parameter of the preview.php page...
CVE-2024-40576
Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "House No" and "Description" parameters in the houses page at the index.php component...
Web-School ERP 跨站脚本漏洞
Web-School ERP is an application from Web-School India, Inc. An ERP application. A cross-site scripting vulnerability exists in School ERP Pro+Responsive version 1.0, which originates from a cross-site scripting vulnerability in the /schoolerp/officeadmin/ page for the esbankacc, esbankname,...
PT-2024-25480 · Unknown · Hengan Weighing Management Information Query Platform
Name of the Vulnerable Software and Affected Versions: Hengan Weighing Management Information Query Platform versions 2019-2021 53.25 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the tuser Number parameter at the "search user.aspx"...
Fujian Kelixin Command and Dispatch Platform SQL Injection Vulnerability
Fujian Kelixin Command and Dispatch Platform is a command and dispatch platform of Fujian Kelixin Company. Fujian Kelixin Command and Dispatch Platform version 20240318 and earlier versions have a SQL injection vulnerability that originates from an unknown function in /api/client/editemedia.php,...