CVE-2025-9425 itsourcecode Online Tour and Travel Management System enquiry.php sql injection

A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulation of the argument pid results in sql injection. The attack is possible to be carried out remotely...

itsourcecode Apartment Management System SQL注入漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements for parameter IDs in the /fair/addfair.php file. An attacker can exploit this...

Job Diary admin-inbox.php file SQL injection vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID in the file /admin-inbox.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

Online Admission System viewdoc.php File SQL Injection Vulnerability

Online Admission System is an online admission system. The Online Admission System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID in the file /viewdoc.php. An attacker can exploit this vulnerability to...

Exam Form Submission delete_s7.php file SQL injection vulnerability

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter ID in file /admin/deletes7.php. An attacker can exploit this vulnerability to execute illegal SQL commands...

Projectworlds Online Admission System 安全漏洞

Online Admission System is an online admission system. The Online Admission System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /adminac.php. An attacker can exploit this vulnerability to...

Code-Projects Exam Form Submission 注入漏洞

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. An injection vulnerability exists in code-projects Exam Form Submission version 1.0, which originates from SQL injection due to manipulation of the parameter ID in the file /admin/deletes3.php...

CampCodes Courier Management System 注入漏洞

CampCodes Courier Management System is a courier management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Courier Management System version 1.0, which originates from a SQL injection due to a mishandling of the parameter ID in the file /edituser.php...

1000 Projects ABC Courier Management System 注入漏洞

1000 Projects ABC Courier Management System is an open source courier management system from 1000 Projects. An injection vulnerability exists in 1000 Projects ABC Courier Management System version 1.0, which originates from a SQL injection caused by the parameter ID in the file /getbyid.php...

Voting System voters_row.php file SQL Injection Vulnerability

Voting System is an election system. Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements for parameter ID in file /admin/votersrow.php. An attacker can exploit this vulnerability to execute illegal SQL commands ...

Code-Projects Online Book Shop 注入漏洞

Code-Projects Online Book Shop is Code-Projects open source an online bookstore . Code-Projects Online Book Shop version 1.0 suffers from an injection vulnerability that stems from SQL injection due to incorrect manipulation of the parameter cid in the file /getdoctordaybooking.php...

CampCodes Online Recruitment Management System 安全漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines, Inc. A security vulnerability exists in CampCodes Online Recruitment Management System version 1.0, which originates from a parameter ID operation leading to SQL injection...

PHPGurukul Zoo Management System 注入漏洞

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /admin/manage-normal-ticket.php. An attacker can exploit this vulnerability t...

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that stems from a lack of validation of the idfuncionario parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

Simple Pizza Ordering System editcus.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /editcus.php. An attacker can exploit this vulnerabilit...

Code-Projects Car Rental System 注入漏洞

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in parameter ID in file /admin/approve.php. An attacker can exploit this vulnerability to execute illegal SQL...

Online Bidding System bidlog.php File SQL Injection Vulnerability

Online Bidding System is an online bidding system. Online Bidding System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter ID in the file /bidlog.php. An attacker can exploit this vulnerability to execute...

Code-Projects Restaurant Order System 注入漏洞

Code-Projects Restaurant Order System is a Code-Projects open source restaurant order system . Code-Projects Restaurant Order System version 1.0 suffers from an injection vulnerability that originates from SQL injection due to incorrect manipulation of the parameter ID in the file /tablelow.php...

CodeAstro Real Estate Management System 注入漏洞

CodeAstro Real Estate Management System is a real estate management system from CodeAstro. An injection vulnerability exists in CodeAstro Real Estate Management System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter ID in the file...

AssamLook CMS 安全漏洞

AssamLook CMS is a software for content management from AssamLook India. A security vulnerability exists in AssamLook CMS version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file /product.php...