551 matches found
defenselessV1
defenselessV1 Defenselessは、PHP/MySQLで書かれた脆弱性のあるWebアプリケーションです。これは本アプリケーションの最初のバージョンです。本アプリケーションの目的は、開発者やアプリケーションセキュリティ初心者にセキュリティ意識を高めることです。近々さらに多くのバグを含むように更新され、新しい脆弱性のあるアプリケーションも開発中です。改善点があればぜひ教えてください。 免責事項 このアプリケーションを本番環境または実環境でホストしないでください。 セットアップ このアプリのセットアップは簡単です。 1...
CVE-2024-34225
Computer Laboratory Management System using PHP and MySQL 1.0 Submitter: Kha Do Vulnerability Cross Site Scripting Description Cross Site Scripting vulnerability in php-lms/admin/?page=systeminfo in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject...
csaf
DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA es una aplicación web hecha en PHP/MySQL que es extremadamente vulnerable. Su principal objetivo es ayudar a profesionales de seguridad a poner a prueba sus habilidades y herramientas en un entorno legal, ayudar a desarrolladore...
Zero-Day-Legacy
🎓 卒業プロジェクト — Ajloun National University ANU IT学部 · サイバーセキュリティ＆クラウドコンピューティング · 2026年度 🏆 大学最高評価：97% 📖 概要 Zero-Day Legacy は、Ajloun National University の卒業プロジェクトとして構築された、現実的で意図的に脆弱性を持たせた Boot-to-Root CTF（Capture The Flag） ラボマシンです。複数の脆弱性クラスにわたる完全な実世界の攻撃チェーンを包含する、Royal Health Hospital という病院管理システ...
CVE-2026-7028-SQLI
CodeAstro-Online-Job-Portal-SQLi-Delete-All Details Vendor: CodeAstro Product: Online Job Portal Project in PHP MySQL Version: 1.0 Vulnerability Type: SQL Injection CWE: CWE-89 Affected Endpoint: /admin/jobs-admins/delete-jobs.php Parameter: id GET Impact: Allows deletion of all job records in th...
CVE-2026-6201-IDOR
CodeAstro 在线求职门户中的越权访问漏洞允许任意删除职位 详细信息 供应商： CodeAstro 产品： PHP MySQL 在线求职门户项目 版本： 1.0 漏洞类型： 越权访问（IDOR） CWE： CWE-639 受影响文件： /jobs/job-delete.php 参数： id（GET） 影响： 经过身份验证的雇主可以通过操纵请求中的 id 参数删除任何其他雇主的职位发布。 描述 由 CodeAstro 开发的 PHP MySQL 在线求职门户项目在处理删除请求之前，未能验证经过身份验证的用户是否拥有该职位发布。通过更改 GET 请求中的 id...
CVE-2026-29861
CVE-2026-29861 🛡️ CVE 披露：CVE-2026-29861 — PHP-MYSQL-User-Login-System 中的 SQL 注入漏洞 披露日期： 2026 年 4 月 10 日 CVE ID： CVE-2026-29861 严重性： 严重（CVSS 9.8） 🧩 摘要 PHP-MYSQL-User-Login-System v1.0 中存在一个严重的 SQL 注入漏洞，具体位于 login.php 端点。该应用程序直接将未经净化的用户输入拼接到 SQL 查询中，使得未认证的攻击者能够绕过身份验证并获得完全的管理员访问权限。 此问题已被分配标识符...
CVE-2026-14622 jairiidriss restaurant-website-php-mysql AJAX Endpoint ajax_files missing authentication
A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajaxfiles of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is...
CVE-2026-14622
CVE-2026-14622 affects the restaurant-website-php-mysql project (up to commit 521428b5b612449df0cf4a5d15ee40cba67f3d35). The vulnerability is in the /admin/ajax_files component of the AJAX Endpoint, whereby input manipulation leads to missing authentication. It is exploitable remotely, with a pub...
emlog 跨站请求伪造漏洞
Emlog is an open-source CMS website building system based on PHP and MySQL. Versions of Emlog prior to 2.6.11 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from the lack of CSRF protection in critical management functions, which could allow attackers to trick...
CVE-2026-29861
PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...
CVE-2026-29861
PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...
CVE-2025-63442
Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting XSS via the Profile Section. The system fails to properly sanitize user input, allowing attackers to inject and execute arbitrary JavaScript when the input is displayed in the browser...
PT-2025-44771
Name of the Vulnerable Software and Affected Versions Simple User Management System with PHP-MySQL version 1.0 Description The Simple User Management System with PHP-MySQL fails to properly sanitize user input in the Profile Section, allowing attackers to inject and execute arbitrary JavaScript...
EUVD-2025-36057
A security flaw has been discovered in ajayrandhawa User-Management-PHP-MYSQL web up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This vulnerability affects unknown code. Performing manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been...
CVE-2025-12202 ajayrandhawa User-Management-PHP-MYSQL web cross-site request forgery
A security flaw has been discovered in ajayrandhawa User-Management-PHP-MYSQL web up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This vulnerability affects unknown code. Performing manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been...
User-Management-PHP-MYSQL 安全漏洞
User-Management-PHP-MYSQL is a secure user management system by Ajay Randhawa Individual Developer. A security vulnerability exists in User-Management-PHP-MYSQL that stems from mishandling of unknown code and could lead to cross-site request forgery attacks...
EUVD-2020-29370
Malware in sbrugna...