ZTE GoldenDB 安全漏洞

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An improper privilege management vulnerability exists in ZTE GoldenDB...

Zhide Modern Farm Digital Integrated Management System 安全漏洞

Zhide Modern Farm Digital Integrated Management System is a modern farm digital integrated management system from Zhide, China. A security vulnerability exists in Zhide Modern Farm Digital Integrated Management System version 1.0, which originates from a vulnerability that could lead to the...

Human Metapneumovirus (HMPV) – Testing Management System 代码注入漏洞

Human Metapneumovirus HMPV - Testing Management System is a PHP and MySQL based system developed to manage human lung virus testing. A code injection vulnerability exists in Human Metapneumovirus HMPV - Testing Management System version 1.0, which stems from improper manipulation of the...

PHPGurukul Pre-School Enrollment System 注入漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul Pre-School Enrollment System that stems from improper manipulation of the fullname/emailid/mobileNumber parameters, which cou...

PHPGurukul Pre-School Enrollment System 安全漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Pre-School Enrollment System that stems from improper manipulation of the add-subadmin.php file in the Sub Admin Handler...

student-manage 安全漏洞

student-manage is a student grade management system developed by the Chinese individual developer Huang Yongkang. A security vulnerability exists in huang-yk student-manage version 1.0, which stems from a possible cross-site request forgery issue...

Code-Projects Blood Bank Management System 注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter memberid that can lead to SQL injection...

PHPGurukul Pre-School Enrollment System 注入漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul Pre-School Enrollment System, which stems from the fact that incorrect manipulation of the parameters classname/capacity can...

Code-Projects Blood Bank Management System 注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter donorid that can lead to SQL injection...

Projectworlds Online Hotel Booking System 注入漏洞

Projectworlds Online Hotel Booking System is an online hotel booking system from the Austrian company Projectworlds. An injection vulnerability exists in Projectworlds Online Hotel Booking System version 1.0, which stems from an incorrect operation of the parameter checkin that can lead to SQL...

Code-Projects Blood Bank System 安全漏洞

Code-Projects Blood Bank System is an open source blood bank management system from Code-Projects. A security vulnerability exists in Code-Projects Blood Bank System version 1.0, which stems from an incorrect operation of the parameter Availibility that can lead to a cross-site scripting attack...

CVE-2025-25133 WordPress WP Frontend Submit Plugin <= 1.1.0 - Reflected Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in newbiesup WP Frontend Submit wp-frontend-submit allows Reflected XSS.This issue affects WP Frontend Submit: from n/a through = 1.1.0...

CVE-2025-1874

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php...

SourceCodester Best online news portal project SQL注入漏洞

SourceCodester Best online news portal project is a SourceCodester open source news website. SourceCodester Best online news portal project version 1.0 has a SQL injection vulnerability, the vulnerability stems from the admin/add-category.php file has SQL injection...

IBM Controller 安全漏洞

IBM Cognos Controller is a corporate performance management CPM software for financial consolidation, reporting and analysis. A weak password vulnerability exists in IBM Cognos Controller versions 11.0.0 through 11.1.0, which stems from the fact that the system does not require users to set stron...

WordPress SetSail Membership plugin <= 1.0.3 - Authentication Bypass via Account Takeover vulnerability

Authentication Bypass via Account Takeover vulnerability discovered by Tonn in WordPress Plugin SetSail Membership versions = 1.0.3...

CVE-2025-1747

CVE-2025-1747 describes HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. The issue allows an attacker to modify the HTML of a victim’s browser by sending a malicious URL and altering the parameter name in /account/login. Affected software: OpenCart (opencart/opencart package in...

PT-2025-9110 · Loggrove · Loggrove

Name of the Vulnerable Software and Affected Versions: Loggrove version 1.0 Description: The issue concerns SQL Injection in the read.py file. Recommendations: For version 1.0, consider restricting access to the read.py file until a patch is available. As a temporary workaround, review and modify...

Loggrove 安全漏洞

Loggrove is a web platform service by olajowon individual developer. A security vulnerability exists in Loggrove v1.0, which stems from an SQL injection in the read.py file...

WUZHI CMS 安全漏洞

WUZHI CMS is an open source content management system CMS based on PHP and MySQL by Five Fingers WUZHI. A security vulnerability exists in WUZHI CMS version v4.1.0, which originates from cross-site scripting in the del function...