Lucene search
+L

132 matches found

OSV
OSV
•added 2025/02/13 4:16 p.m.•14 views

CVE-2025-25352

A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the pagetitle POST request parameter...

7.2CVSS6.2AI score0.00758EPSS
SaveExploits1References1
NVD
NVD
•added 2025/02/13 4:16 p.m.•24 views

CVE-2025-25352

A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the pagetitle POST request parameter...

7.2CVSS0.00758EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/13 12:00 a.m.•77 views

CVE-2025-25352

CVE-2025-25352 : A SQL injection vulnerability exists in PHPGurukul Land Record System v1.0, specifically in /admin/aboutus.php where the POST parameter pagetitle can be exploited to execute arbitrary SQL code. This affects the affected software/component as described in the linked sources; explo...

7.2CVSS8.8AI score0.00758EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/02/13 12:00 a.m.•12 views

PHPGurukul Land Record System 安全漏洞

PHPGurukul Land Record System is a land management system from PHPGurukul. A security vulnerability exists in PHPGurukul Land Record System v1.0, which originates from an SQL injection vulnerability contained in the pagetitle parameter of the /admin/aboutus.php file...

7.2CVSS7.8AI score0.00758EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/13 12:00 a.m.•4 views

CVE-2025-25352: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the pagetitle POST request parameter...

7.2CVSS6.5AI score0.00758EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/13 12:00 a.m.•30 views

PT-2025-7082 · Unknown · Phpgurukul Land Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Land Record System version 1.0 Description: A SQL Injection issue was found in the /admin/aboutus.php file, allowing remote attackers to execute arbitrary code via the pagetitle POST request parameter. This enables attackers to...

7.2CVSS9.2AI score0.00758EPSS
SaveExploits1References6
OSV
OSV
•added 2025/01/10 2:15 p.m.•15 views

CVE-2024-57686

A Cross Site Scripting XSS vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter...

9.8CVSS6.1AI score0.01645EPSS
SaveExploits1References2
NVD
NVD
•added 2025/01/10 2:15 p.m.•38 views

CVE-2024-57686

A Cross Site Scripting XSS vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter...

9.8CVSS0.01645EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/01/10 12:00 a.m.•42 views

CVE-2024-57686

A Cross Site Scripting XSS vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter...

0.01645EPSS
SaveExploits1References2
CVE
CVE
•added 2025/01/10 12:00 a.m.•74 views

CVE-2024-57686

The PHPGurukul Land Record System v1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the /landrecordsys/admin/contactus.php endpoint. This flaw allows remote attackers to execute arbitrary code by exploiting the "pagetitle" parameter due to improper neutralization of input during...

9.8CVSS6.6AI score0.01645EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/10 12:00 a.m.•6 views

PT-2025-3542

Name of the Vulnerable Software and Affected Versions PHPGurukul Land Record System version 1.0 Description A Cross Site Scripting XSS issue was found in the "/landrecordsys/admin/contactus.php" endpoint, allowing remote attackers to execute arbitrary code via the pagetitle parameter...

9.8CVSS0.01645EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•15 views

PHPGurukul Land Record System 安全漏洞

PHPGurukul Land Record System is a land management system from PHPGurukul. A security vulnerability exists in PHPGurukul Land Record System version 1.0, which stems from a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code via the pagetitle parameter...

9.8CVSS7AI score0.01645EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/10 12:00 a.m.•4 views

CVE-2024-57686: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter...

9.8CVSS6.5AI score0.01645EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/21 3:15 p.m.•16 views

CVE-2024-11592

A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS6.9AI score0.00913EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/11/21 12:00 a.m.•18 views

PT-2024-17125 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue has been discovered, affecting the /admin/about-us.php file. The manipulation of the pagetitle argument leads to SQL injection. This issue can be exploit...

9.8CVSS7.9AI score0.00913EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2024/11/21 12:00 a.m.•12 views

1000 Projects Beauty Parlour Management System 安全漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A security vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the pagetitle parameter that can lead t...

9.8CVSS7.8AI score0.00913EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/21 12:00 a.m.•7 views

CVE-2024-11592: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS7AI score0.00913EPSS
SaveExploits1References1
OSV
OSV
•added 2024/03/20 10:15 p.m.•14 views

CVE-2024-2720

A vulnerability classified as problematic was found in Campcodes Complete Online DJ Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to cross site scripting. The attack can be launched...

6.1CVSS3.8AI score0.00567EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•17 views

Campcodes Complete Online DJ Booking System 跨站脚本漏洞

Campcodes Complete Online DJ Booking System is an online DJ booking system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Online DJ Booking System, which stems from a cross-site scripting vulnerability in the pagetitle parameter of the...

6.1CVSS4.5AI score0.00567EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•5 views

CVE-2024-2720: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Campcodes Complete Online DJ Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to cross site scripting. The attack can be launched...

6.1CVSS3.9AI score0.00567EPSS
SaveExploits1References2
Rows per page
Query Builder