166 matches found
CVE-2024-44654: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...
CVE-2024-44641: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php...
PT-2025-46960
Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.20 Description The PHPGurukul Student Record System is affected by a SQL Injection issue. This issue occurs via the currentpassword parameter in the 'change-password.php' file. Exploitation of this...
CVE-2024-44633: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php...
CVE-2025-12325: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-11599: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /forgot-password.php. This manipulation of the argument email causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...
EUVD-2012-4454
Malware in sbrugna...
EUVD-2005-3046
Malware in sbrugna...
EUVD-2009-0537
Malware in sbrugna...
EUVD-2009-0536
Malware in sbrugna...
EUVD-2024-32954
Malicious code in bioql PyPI...
CVE-2025-11053: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could b...
CVE-2025-57146: Improper Neutralization of Special Elements used in an SQL Command
phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...
CVE-2025-50485
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...
CVE-2025-50486: Insufficient Session Expiration
Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50485: Insufficient Session Expiration
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...
CVE-2025-50484: Insufficient Session Expiration
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50492: Improper Input Validation
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50488: Insufficient Session Expiration
Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50491: Insufficient Session Expiration
Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...