Lucene search
+L

166 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•3 views

CVE-2024-44654: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•1 views

CVE-2024-44641: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/14 12:00 a.m.•15 views

PT-2025-46960

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.20 Description The PHPGurukul Student Record System is affected by a SQL Injection issue. This issue occurs via the currentpassword parameter in the 'change-password.php' file. Exploitation of this...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•1 views

CVE-2024-44633: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•3 views

CVE-2025-12325: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS5.5AI score0.00505EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/11 12:00 a.m.•1 views

CVE-2025-11599: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /forgot-password.php. This manipulation of the argument email causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2012-4454

Malware in sbrugna...

6.1CVSS6.2AI score0.01207EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2005-3046

Malware in sbrugna...

6.8CVSS6.4AI score0.01137EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2009-0537

Malware in sbrugna...

4.3CVSS6.4AI score0.01022EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2009-0536

Malware in sbrugna...

4.3CVSS6.4AI score0.01022EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-32954

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00592EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/27 12:00 a.m.•3 views

CVE-2025-11053: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could b...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•1 views

CVE-2025-57146: Improper Neutralization of Special Elements used in an SQL Command

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/28 8:17 p.m.•15 views

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00325EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•0 views

CVE-2025-50486: Insufficient Session Expiration

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00325EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•1 views

CVE-2025-50485: Insufficient Session Expiration

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00325EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•1 views

CVE-2025-50484: Insufficient Session Expiration

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00263EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•1 views

CVE-2025-50492: Improper Input Validation

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00432EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•1 views

CVE-2025-50488: Insufficient Session Expiration

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00314EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•2 views

CVE-2025-50491: Insufficient Session Expiration

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00289EPSS
SaveExploits0References3
Rows per page
Query Builder