Lucene search
+L

932 matches found

OSV
OSV
•added 2025/05/16 6:16 p.m.•14 views

CVE-2025-4793

A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been classified as critical. Affected is an unknown function of the file /edit-student-profile.php. The manipulation of the argument cgpa leads to sql injection. It is possible to launch the attack remotely. The exploi...

9.8CVSS5.8AI score0.00722EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/16 9:00 a.m.•10 views

CVE-2025-4766 PHPGurukul Zoo Management System profile.php sql injection

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotel...

7.5CVSS7.6AI score0.00514EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/16 9:00 a.m.•33 views

CVE-2025-4766 PHPGurukul Zoo Management System profile.php sql injection

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotel...

7.5CVSS0.00514EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•4 views

CVE-2025-4785: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user-profile.php. The manipulation of the argument fullname/contactnumber leads to sql injection. The attack may be launched...

9.8CVSS7AI score0.00728EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/16 12:00 a.m.•23 views

PT-2025-21666 · Unknown · Phpgurukul Daily Expense Tracker System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Daily Expense Tracker System version 1.1 Description: A critical issue was found in the system, affecting some unknown functionality of the file /user-profile.php. The manipulation of the fullname and contactnumber arguments leads ...

9.8CVSS7.6AI score0.00728EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•3 views

CVE-2025-4793: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been classified as critical. Affected is an unknown function of the file /edit-student-profile.php. The manipulation of the argument cgpa leads to sql injection. It is possible to launch the attack remotely. The exploi...

9.8CVSS7.2AI score0.00722EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/16 12:00 a.m.•16 views

PT-2025-21629 · Unknown · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical vulnerability was found in PHPGurukul Zoo Management System. The issue affects an unknown functionality of the file /admin/profile.php. The manipulation of the contactnumber...

9.8CVSS7.5AI score0.00514EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•2 views

CVE-2025-4761: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS6.9AI score0.00486EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•9 views

PHPGurukul Human Metapneumovirus Testing Management System 注入漏洞

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter...

9.8CVSS7.8AI score0.00641EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•4 views

CVE-2025-4812: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiat...

9.8CVSS7AI score0.00641EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•8 views

CVE-2025-4766: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotel...

9.8CVSS7AI score0.00514EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/05/15 3:31 p.m.•39 views

CVE-2025-4703 PHPGurukul Vehicle Parking Management System admin-profile.php sql injection

A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be...

7.5CVSS0.00514EPSS
SaveExploits1References5
NVD
NVD
•added 2025/05/15 2:15 p.m.•25 views

CVE-2025-44183

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the name, email, and mobile parameters...

6.1CVSS0.00275EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•4 views

CVE-2025-4703: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be...

9.8CVSS6.9AI score0.00514EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/15 12:00 a.m.•59 views

CVE-2025-44183

The Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross-Site Scripting (XSS) in the /admin/profile.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data provided via the name, email, and mobile parameters. An attacker can exploit th...

6.1CVSS6.1AI score0.00275EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/14 12:00 a.m.•3 views

CVE-2025-44184: Improper Neutralization of Input During Web Page Generation

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the websiteimage, fname, lname, contact, username, and address parameters...

4.8CVSS5.8AI score0.00264EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2025/05/10 5:00 p.m.•51 views

CVE-2025-4508 PHPGurukul e-Diary Management System my-profile.php sql injection

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

7.5CVSS0.00507EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/10 5:00 p.m.•13 views

CVE-2025-4508 PHPGurukul e-Diary Management System my-profile.php sql injection

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

7.5CVSS7.8AI score0.00507EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/10 12:00 a.m.•2 views

CVE-2025-4508: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

9.8CVSS7AI score0.00507EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/05/07 12:00 a.m.•15 views

COVID19 Testing Management System profile.php File SQL Injection Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobilenumber in file /profile.ph...

9.8CVSS7.4AI score0.00519EPSS
SaveExploits1References1
Rows per page
Query Builder