Lucene search
+L

6780 matches found

Cvelist
Cvelist
•added 2025/04/30 12:00 a.m.•27 views

CVE-2025-45020

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter in a POST request...

0.00536EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•12 views

PT-2025-18278 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A SQL Injection issue was discovered in the normal-bwdates-reports-details.php file. This issue allows remote attackers to execute arbitrary SQL code via the todate paramete...

7.2CVSS8.2AI score0.00536EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/04/30 12:00 a.m.•12 views

PHPGurukul Student Record System 注入漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in parameter sub1 in file /add-subject.php. An attacker can exploit this vulnerability to execute...

9.8CVSS7.8AI score0.00507EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/30 12:00 a.m.•9 views

PHPGurukul Pre-School Enrollment System 注入漏洞

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobilenumber in file /admin/edit-subadmin.php. An...

8.8CVSS8.2AI score0.00429EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/30 12:00 a.m.•10 views

PHPGurukul Student Record System 注入漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter course-short in the file /add-course.php. An attacker can exploit this vulnerability to...

9.8CVSS7.8AI score0.00507EPSS
SaveExploits1References5
CVE
CVE
•added 2025/04/30 12:00 a.m.•74 views

CVE-2025-45019

A SQL injection vulnerability exists in the PHPGurukul Park Ticketing Management System v2.0 within the /add-foreigners-ticket.php file. The root cause is the improper handling of the cprice POST request parameter , which allows remote attackers to query strings and trick the server into executin...

5.4CVSS8.8AI score0.00442EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/04/30 12:00 a.m.•32 views

CVE-2025-45021

A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit this vulnerability via the email parameter in a POST request to execute arbitrary SQL commands...

0.00215EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•12 views

PT-2025-18277 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A SQL injection issue was found in the /add-foreigners-ticket.php file. This allows remote attackers to execute arbitrary code via the cprice POST request parameter...

9.8CVSS8.3AI score0.00442EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/04/30 12:00 a.m.•9 views

CVE-2025-45019

A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the cprice POST request parameter...

8.7AI score0.00442EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/04/30 12:00 a.m.•36 views

CVE-2025-45015

A Cross-Site Scripting XSS vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters...

0.00315EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/04/30 12:00 a.m.•30 views

CVE-2025-45018

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter...

0.0056EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•13 views

PT-2025-18274 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A Cross-Site Scripting XSS issue was discovered in the foreigner-bwdates-reports-details.php file. This issue allows remote attackers to inject arbitrary JavaScript code via...

6.1CVSS5.8AI score0.00315EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•9 views

PT-2025-18275 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A SQL injection issue was discovered in the edit-ticket.php file. This issue allows remote attackers to execute arbitrary code via the tprice parameter in a POST request. Th...

9.8CVSS8.2AI score0.00756EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•11 views

PT-2025-18282 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A HTML Injection issue was discovered in the normal-bwdates-reports-details.php file. This issue allows remote attackers to execute arbitrary code via the fromdate and todat...

5.3CVSS7.5AI score0.00334EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/04/30 12:00 a.m.•13 views

CVE-2025-45010

A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters...

8.1AI score0.00334EPSS
SaveExploits1References1
CVE
CVE
•added 2025/04/30 12:00 a.m.•84 views

CVE-2025-45009

The PHPGurukul Park Ticketing Management System v2.0 is affected by an HTML Injection vulnerability in the normal-search.php file. The root cause is the mishandling of the searchdata parameter, which allows remote attackers to inject malicious HTML code and potentially execute arbitrary code. Thi...

8.1AI score0.00334EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/04/30 12:00 a.m.•26 views

CVE-2025-45009

A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata parameter...

0.00334EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/29 8:15 p.m.•30 views

CVE-2025-4080

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-request.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched...

8.8CVSS0.00429EPSS
SaveExploits1References5
OSV
OSV
•added 2025/04/29 8:15 p.m.•14 views

CVE-2025-4080

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-request.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched...

8.8CVSS5.8AI score0.00429EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/04/29 7:31 p.m.•35 views

CVE-2025-4080 PHPGurukul Online Nurse Hiring System view-request.php sql injection

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-request.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched...

6.5CVSS0.00429EPSS
SaveExploits1References5
Rows per page
Query Builder