CVE-2025-45322: Improper Neutralization of Special Elements used in an SQL Command

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter...

CVE-2025-45320: Exposure of Information Through Directory Listing

A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0...

Kashipara Online Service Management Portal 安全漏洞

Kashipara Online Service Management Portal is an online service management portal from Kashipara. A security vulnerability exists in Kashipara Online Service Management Portal version V1.0, which stems from mishandling of the /osms/Requester/ directory, which could lead to disclosure of directory...

CVE-2025-45321: Improper Neutralization of Special Elements used in an SQL Command

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword...

Phone Shop Sales Management System 1.0 Shell Upload Exploit

Exploit Title: Phone Shop Sales Management System - Arbitrary File Upload Unauthenticated Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/10882/phone-shop-sales-managements-system.html Version: 1.0 Tested on: Windows 10 build 19041 + xampp 3.2.4 import requests...