CVE-2026-77020

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-77020 CodeAstro Apartment Visitor Management System password-recovery.php sql injection

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-77020

CodeAstro Apartment Visitor Management System 1.0 is vulnerable to SQL injection via the email argument in password-recovery.php. Exploitation requires no authentication and is possible over the network; a proof-of-concept exploit is publicly available. No patch version or vendor fix is provided ...

CVE-2026-77020 CodeAstro Apartment Visitor Management System password-recovery.php sql injection

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

PT-2026-79068

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-77020: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2025-65379: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query...

Student Record System password-recovery.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements for the id and emailid parameters in password-recovery.php. An attacker can exploit this vulnerability to...

CVE-2024-44632: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...

CVE-2025-9013: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2025-51045: Improper Neutralization of Special Elements used in an SQL Command

Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin/password-recovery.php file. This vulnerability is attributed to the insufficient validation of user input for the username parameter...

CVE-2024-51103: Improper Neutralization of Special Elements used in an SQL Command

PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recovery.php via the emailid and id parameters...

CVE-2025-4004: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. The attack can be initiated...

CVE-2025-3216: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been classified as critical. This affects an unknown part of the file /password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. It is possible to initiate the attack remotely. T...

CVE-2025-2372: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the file /password-recovery.php of the component Password Recovery Page. The manipulation of the argument username leads to sql injection. It is...

PT-2025-11469

Name of the Vulnerable Software and Affected Versions PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description A critical issue has been discovered in the Password Recovery Page component, specifically affecting the /password-recovery.php file. The manipulation of the...

CVE-2025-1902 PHPGurukul Student Record System password-recovery.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has...

PT-2025-9619

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.2 Description A critical issue has been discovered, affecting the /password-recovery.php file, where manipulation of the emailid argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-9697

Name of the Vulnerable Software and Affected Versions PHPGurukul Restaurant Table Booking System version 1.0 Description A critical issue was found in the PHPGurukul Restaurant Table Booking System. The problem is related to an unknown function of the file /admin/password-recovery.php, where the...

CVE-2025-1902: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has...