Lucene search
K

8 matches found

Vulnrichment
Vulnrichment
added 2025/12/23 12:32 a.m.3 views

CVE-2025-15034 itsourcecode Student Management System record.php sql injection

A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

7.5CVSS6.7AI score0.00028EPSS
Exploits1References5
CVE
CVE
added 2025/12/23 12:32 a.m.14 views

CVE-2025-15034

CVE-2025-15034 affects itsourcecode Student Management System 1.0. The vulnerability exists in /record.php where manipulating the ID parameter triggers a SQL injection. It is exploitable remotely and, per multiple sources, the exploit has been released publicly. No specific remediation is stated ...

9.8CVSS7.2AI score0.00028EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2024/05/06 6:31 a.m.55 views

CVE-2024-4528

CVE-2024-4528 affects SourceCodester Prison Management System 1.0. The vulnerability resides in the /Admin/user-record.php function where manipulating the txtfullname parameter enables cross-site scripting. Descriptions indicate remote exploitation and public disclosure of the exploit. Several so...

4.8CVSS6.2AI score0.00178EPSS
Exploits1References4Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.10 views

phpDealerLocator Multiple SQL Injection Vulnerabilities

No description provided by source. Exploit Title: phpDealerLocator - Multiple SQL Injection vulnerabilities Date: 7/3/2011 Author: Robert Cooper adminatwebsiteauditing.org Software Link: phpdealerlocator.yourphppro.com Tested on: Linux/Windows 7 Vulnerable Parameters: record.php?DealerID=...

7.1AI score
Exploits0
myhack58
myhack58
added 2013/10/04 12:0 a.m.36 views

destoon b2b system all version SQL injection vulnerability analyses reference exp-vulnerability warning-the black bar safety net

在 include/global.func.php in stripsql function to pass the incoming value for the filter, but we can bypass this limit, to achieve the full version of the injected function stripsql$string $search =...

1.1AI score
Exploits0
myhack58
myhack58
added 2013/10/01 12:0 a.m.14 views

destoon full version SQL injection vulnerability-vulnerability warning-the black bar safety net

在 include/global.func.php in stripsql function to pass the incoming value for the filter, but we can bypass this limit, to achieve the full version of the injected function stripsql$string $search =...

0.1AI score
Exploits0
NVD
NVD
added 2011/09/23 11:55 p.m.9 views

CVE-2011-3699

John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/test-active-record.php and certain other files...

5CVSS6.2AI score0.00283EPSS
Exploits1References3
Prion
Prion
added 2011/09/23 11:55 p.m.11 views

Information disclosure

John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/test-active-record.php and certain other files...

5CVSS6.7AI score0.00283EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder