Lucene search
+L

7893 matches found

CNNVD
CNNVD
•added 2025/04/29 12:00 a.m.•17 views

PHPGurukul COVID19 Testing Management System 安全漏洞

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Status in the /test-details.php...

9.8CVSS7.8AI score0.00639EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/29 12:00 a.m.•15 views

PHPGurukul Online Nurse Hiring System 安全漏洞

PHPGurukul Online Nurse Hiring System is an online nurse hiring system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Online Nurse Hiring System, which stems from improper handling of the parameter viewid in the file /admin/view-request.php, which could lea...

8.8CVSS6.9AI score0.00462EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/29 12:00 a.m.•7 views

CVE-2025-4060: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /category.php. The manipulation of the argument catname leads to sql injection. The attack may be initiated remotely. The exploit has bee...

9.8CVSS7AI score0.00526EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/29 12:00 a.m.•4 views

CVE-2025-4070: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS6.9AI score0.00639EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/29 12:00 a.m.•20 views

PHPGurukul Student Record System 安全漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter currentpassword in the file /change-password.php. An attacker can exploit this...

9.8CVSS7.8AI score0.00639EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/04/29 12:00 a.m.•27 views

PT-2025-18193 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.20 Description: A critical issue was found in the PHPGurukul Student Record System, affecting an unknown function of the file "change-password.php". The manipulation of the currentpassword argument...

9.8CVSS7.5AI score0.00639EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/29 12:00 a.m.•6 views

CVE-2025-4073: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Student Record System 3.20. It has been classified as critical. Affected is an unknown function of the file /change-password.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS6.9AI score0.00639EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/29 12:00 a.m.•4 views

CVE-2025-4080: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-request.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched...

8.8CVSS6.4AI score0.00462EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/29 12:00 a.m.•17 views

PT-2025-18198 · Unknown · Phpgurukul Curfew E-Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Curfew e-Pass Management System version 1.0 Description: A critical issue was found in the PHPGurukul Curfew e-Pass Management System. The problem affects an unknown functionality of the file /admin/pass-bwdates-report.php. The...

9.8CVSS7.6AI score0.00639EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/29 12:00 a.m.•4 views

CVE-2025-4072: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit-nurse.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

8.8CVSS6.3AI score0.00525EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/29 12:00 a.m.•18 views

PT-2025-18147 · Unknown · Phpgurukul Notice Board System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Notice Board System version 1.0 Description: A critical issue has been found in the PHPGurukul Notice Board System, affecting the file /category.php. The manipulation of the catname argument leads to SQL injection. This issue can b...

9.8CVSS7.6AI score0.00526EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/04/29 12:00 a.m.•18 views

PT-2025-18190 · Unknown · Phpgurukul Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Nurse Hiring System version 1.0 Description: A critical issue affects the processing of the file /admin/edit-nurse.php, leading to sql injection. The attack may be initiated remotely. Multiple parameters might be affected...

8.8CVSS6.7AI score0.00525EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/29 12:00 a.m.•3 views

CVE-2025-4071: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /test-details.php. The manipulation of the argument Status leads to sql injection. The attack can be initiated remotely. The exploit h...

9.8CVSS6.9AI score0.00639EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/29 12:00 a.m.•21 views

PT-2025-18204 · Unknown · Phpgurukul Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Nurse Hiring System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /admin/view-request.php. The manipulation of the viewid argument leads to SQL injection. This...

8.8CVSS6.9AI score0.00462EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/04/29 12:00 a.m.•20 views

PT-2025-18185 · Unknown · Phpgurukul Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Rail Pass Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Rail Pass Management System. This affects an unknown part of the file /admin/changeimage.php. The manipulation of the editid...

9.8CVSS7.5AI score0.00639EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/29 12:00 a.m.•7 views

CVE-2025-4074: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/pass-bwdates-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack...

9.8CVSS7AI score0.00639EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/28 10:15 p.m.•39 views

CVE-2025-4039

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...

9.8CVSS0.00562EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/04/28 9:31 p.m.•21 views

CVE-2025-4039 PHPGurukul Rail Pass Management System search-pass.php sql injection

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...

7.5CVSS7.5AI score0.00562EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/04/28 9:31 p.m.•55 views

CVE-2025-4039 PHPGurukul Rail Pass Management System search-pass.php sql injection

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...

7.5CVSS0.00562EPSS
SaveExploits1References5
CVE
CVE
•added 2025/04/28 9:31 p.m.•99 views

CVE-2025-4039

The CVE-2025-4039 entry affects PHPGurukul Rail Pass Management System 1.0, where the /admin/search-pass.php file’s searchdata parameter is vulnerable to SQL injection. External researchers report remote exploitation possibilities and publicly disclosed exploits. The exact affected functionality ...

9.8CVSS7.4AI score0.00562EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder