CesiumLab Web 注入漏洞

CesiumLab Web is a geographic information base data processing platform from China Earth Visualization Laboratory CesiumLab Inc. An injection vulnerability exists in CesiumLab Web 4.0 and earlier versions, which stems from a misuse of a parameter ID resulting in SQL injection...

PT-2025-32378 · Unknown · Easy Hosting Control Panel

Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: The Easy Hosting Control Panel EHCP contains a SQL injection issue via the id parameter in the Change Settings function. Recommendations: As a temporary workaround, consider...

code-projects Exam Form Submission 安全漏洞

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter ID in file /admin/deletes7.php. An attacker can exploit this vulnerability to execute illegal SQL commands...

Code-Projects Exam Form Submission 注入漏洞

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. An injection vulnerability exists in Code-Projects Exam Form Submission version 1.0, which originates from SQL injection due to manipulation of the parameter ID in the file /admin/deletes2.php...

Simple Pizza Ordering System large.php file SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the parameter ID of file /large.php. An attacker can exploit this vulnerability to...

Online Shoe Store confirm.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of file /admin/confirm.php. The vulnerability can be exploited by an attacker to...

Code-Projects School Fees Payment System 注入漏洞

School Fees Payment System is a tuition payment system. The School Fees Payment System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /student.php. An attacker can exploit this vulnerability...

PHPGurukul Medical Card Generation System 安全漏洞

Medical Card Generation System is a medical card generation system. The Medical Card Generation System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the /admin/manage-card.php file. An attacker ca...

CVE-2025-4483

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /viewpdetails.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The...

itsourcecode Gym Management System 安全漏洞

itsourcecode Gym Management System is an open source gym management system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Gym Management System, which is caused by a SQL injection due to a parameter ID operation in file /ajax.php?action=deleteuser...

Employee Management System SQL注入漏洞

Employee Management System is an employee management system by Mayuri K Individual Developer. A SQL injection vulnerability exists in Employee Management System version 192.168.70.3 and prior versions, which stems from an incorrect manipulation of the parameter id that can lead to SQL injection...

Code-Projects Simple Plugins Car Rental Management 注入漏洞

Code-Projects Simple Plugins Car Rental Management is an open source car rental management plugin for Code-Projects. An injection vulnerability exists in Code-Projects Simple Plugins Car Rental Management version 1.0, which stems from the manipulation of the parameter id that can lead to SQL...

PT-2024-17357 · WordPress · Email Reminders Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: Email Reminders plugin for WordPress versions up to, and including, 2.0.4 Description: The issue is related to Stored Cross-Site Scripting via the id parameter due to insufficient input sanitization and output escaping. This allows...

PT-2024-32018 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A SQL injection issue was discovered in the NavigationAjax interface via the id parameter. This could potentially lead to unauthorized access and data theft. There is no information provided about the...

CVE-2024-8138

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected is the function editManager of the file /index.php?action=editManager of the component Parameter Handler. The manipulation of the argument id as part of String leads to sql...

Vehicle Management System SQL Injection Vulnerability

Vehicle Management System is a vehicle management system by Warren Daloyan, an individual developer. A SQL injection vulnerability exists in Vehicle Management System version 1.0, which stems from the fact that updatebill.php contains an unknown function that allows an attacker to perform SQL...

Computer Laboratory Management System 安全漏洞

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Computer Laboratory Management System v1.0, which originates from a SQL injection vulnerability in the parameter id of the component /admin/...

meetyoucrop big-whale security breach

big-whale is a task scheduling platform open-sourced by Meiyu meetyoucrop. A security vulnerability exists in meetyoucrop big-whale version 1.1, which stems from the presence of an unknown function in /auth/user/all.api in the component Admin Module, which leads to ownership mismanagement via the...

Food Ordering website SQL Injection Vulnerability

Food Ordering website is a food ordering website. A SQL injection vulnerability exists in Food Ordering Website version 1.0, which stems from some unknown processing in categoryfood.php that causes sql injection via the parameter id...

lmxcms SQL注入漏洞

lmxcms dream cms is a website builder system of China Dream Cms lmxcms company. SQL injection vulnerability exists in lmxcms version 1.41, the vulnerability stems from a security issue in the function reply in the file BookAction.class.php, which leads to SQL injection via the parameter id...