CVE-2013-10070

PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names are passed directly to eval without sanitization. A remote attacker can exploit this flaw by crafting a request that injects arbitrary PHP code, resulting in command execution...

CVE-2023-41528

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

jfs: validate AG parameters in dbMount() to prevent crashes

...

CVE-2023-41521

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...

PT-2025-32290 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createStudents.php file. The Id, firstname, and admissionNumber parameters are...

CVE-2023-41521

CVE-2023-41521 affects Student Attendance Management System v1, which contains multiple SQL injection flaws in createSessionTerm.php reachable via the id, termId, and sessionName parameters. The reported impact is severe (CVSS v3.1 base score 8.8, high confidentiality, integrity, and availability...

CVE-2023-41528

CVE-2023-41528 concerns Hospital Management System v4, where the component in question is the file/endpoint responsible for contact handling. The vulnerability is described as multiple SQL injection flaws in contact.php triggered by the parameters txtname, txtphone, and txtmail. According to the ...

CVE-2023-41531

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...

CVE-2023-41522

Student Attendance Management System v1 contains multiple SQL injection vulnerabilities in createStudents.php, exploitable via Id, firstname, and admissionNumber parameters due to improper input handling. CVSS v3.1 metrics indicate HIGH impact on confidentiality, integrity, and availability, with...

PT-2025-32300 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple SQL injection vulnerabilities in the func3.php file. These vulnerabilities are present through the username1 and password2 parameters...

Linux Distros Unpatched Vulnerability : CVE-2019-11751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in...

CVE-2023-41528

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

PT-2025-32298 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple cross-site scripting XSS vulnerabilities in the func2.php file. These vulnerabilities are triggered through the fname and lname parameters...

Linux Distros Unpatched Vulnerability : CVE-2023-52620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: disallow timeout for anonymous sets Never used from userspace, disallow...

CVE-2025-21464

Information disclosure while reading data from an image using specified offset and size parameters...

CVE-2013-10070

PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names are passed directly to eval without sanitization. A remote attacker can exploit this flaw by crafting a request that injects arbitrary PHP code, resulting in command execution...

CVE-2013-10070 PHP-Charts v1.0 PHP Code Execution

PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names are passed directly to eval without sanitization. A remote attacker can exploit this flaw by crafting a request that injects arbitrary PHP code, resulting in command execution...

mcp-package-docs vulnerable to command injection in several tools

Summary A command injection vulnerability exists in the mcp-package-docs MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code...

PT-2025-31994 · Unknown · Php-Charts

Name of the Vulnerable Software and Affected Versions: PHP-Charts version 1.0 Description: PHP-Charts version 1.0 contains a PHP code execution issue in the wizard/url.php file. User-supplied GET parameter names are passed directly to the eval function without sanitization. A remote attacker can...

PT-2025-31967 · Cpuz.Sys · Cpuz.Sys

Name of the Vulnerable Software and Affected Versions: cpuz.sys version 1.0.5.4 Description: An attacker can use DeviceIoControl with unvalidated parameters 0x9C402440 and 0x9C402444 as IoControlCodes to perform RDMSR and WRMSR, respectively. This allows modification of MSR LSTAR and hooking of...