1736 matches found
CVE-2025-9925
A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
CVE-2025-9925 projectworlds Travel Management System detail.php sql injection
A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
CVE-2025-9925
CVE-2025-9925 : In projectworlds Travel Management System 1.0, the pid parameter in /detail.php is vulnerable to SQL injection due to improper validation. This enables remote attackers to execute arbitrary SQL, with public exploit availability. Remediation guidance from PT Security suggests restr...
PT-2025-35829
Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A SQL injection issue exists due to the manipulation of the pid argument in the processing of the /detail.php file. This can be exploited remotely. The exploit has been made...
Projectworlds Travel management System SQL注入漏洞
Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter pid in the file /detail.php. An attacker can exploit this vulnerability to...
PT-2025-35850
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2415 B20250515 Description: A command injection issue exists in the sub 410C34 function of the /cgi-bin/cstecgi.cgi file. Manipulation of the pid argument can lead to remote code execution. The exploit has been...
CVE-2025-9726
A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php. The manipulation of the argument pid results in sql injection. The attack may be launched remotely. The exploit has been released to the...
CVE-2025-9726
A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php. The manipulation of the argument pid results in sql injection. The attack may be launched remotely. The exploit has been released to the...
CVE-2025-9726
A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php. The manipulation of the argument pid results in sql injection. The attack may be launched remotely. The exploit has been released to the...
CVE-2025-9726
CVE-2025-9726 affects Campcodes Farm Management System 1.0, with a vulnerability in the /review.php pid parameter enabling SQL injection. A remote attacker could exploit it and public exploit code is noted in multiple sources. The current connected documents do not provide a confirmed patch or fi...
Linux Distros Unpatched Vulnerability : CVE-2020-28935
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow fo...
Linux Distros Unpatched Vulnerability : CVE-2017-14609
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrar...
CVE-2025-9425
The CVE-2025-9425 entry concerns itsourcecode Online Tour and Travel Management System v1.0. The vulnerability is described as a SQL injection in the /enquiry.php file caused by manipulating the pid parameter, with remote exploitation reportedly possible and the exploit publicly released. Multipl...
PT-2025-34718 · Itsourcecode · Itsourcecode Online Tour/Travel Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A security flaw exists in itsourcecode Online Tour and Travel Management System version 1.0. The issue involves SQL injection in the /enquiry.php file through...
Linux Distros Unpatched Vulnerability : CVE-2017-14159
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary process...
Linux Distros Unpatched Vulnerability : CVE-2018-6536
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow...
Linux Distros Unpatched Vulnerability : CVE-2023-39947
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and...
MAL-2025-13149 Malicious code in @zalastax/nolb-pid (npm)
The package @zalastax/nolb-pid was found to contain malicious code...
