CVE-2025-15034

CVE-2025-15034 affects itsourcecode Student Management System 1.0. The vulnerability exists in /record.php where manipulating the ID parameter triggers a SQL injection. It is exploitable remotely and, per multiple sources, the exploit has been released publicly. No specific remediation is stated ...

CVE-2025-15034 itsourcecode Student Management System record.php sql injection

A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

CVE-2025-15034: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

PT-2024-32471

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A vulnerability was found in the system, affecting an unknown functionality of the file /model/delete record.php. The manipulation of the page argument leads to cros...

CVE-2024-4528

CVE-2024-4528 affects SourceCodester Prison Management System 1.0. The vulnerability resides in the /Admin/user-record.php function where manipulating the txtfullname parameter enables cross-site scripting. Descriptions indicate remote exploitation and public disclosure of the exploit. Several so...

PT-2024-31533

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A vulnerability was found in the SourceCodester Prison Management System, affecting an unknown functionality of the file /Admin/user-record.php. The manipulation of the txtfullnam...

PT-2024-25239

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the id parameter in the /model/delete record.php API endpoint. This can potentially lead to...

CVE-2024-4528: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/user-record.php. The manipulation of the argument txtfullname leads to cross site scripting. The attack can ...

PT-2022-21300

Name of the Vulnerable Software and Affected Versions Prison Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/pms/admin/inmates/manage record.php" endpoint. Recommendations For Prison...

phpDealerLocator Multiple SQL Injection Vulnerabilities

No description provided by source. Exploit Title: phpDealerLocator - Multiple SQL Injection vulnerabilities Date: 7/3/2011 Author: Robert Cooper adminatwebsiteauditing.org Software Link: phpdealerlocator.yourphppro.com Tested on: Linux/Windows 7 Vulnerable Parameters: record.php?DealerID=...

destoon b2b system all version SQL injection vulnerability analyses reference exp-vulnerability warning-the black bar safety net

在 include/global.func.php in stripsql function to pass the incoming value for the filter, but we can bypass this limit, to achieve the full version of the injected function stripsql$string $search =...

destoon full version SQL injection vulnerability-vulnerability warning-the black bar safety net

在 include/global.func.php in stripsql function to pass the incoming value for the filter, but we can bypass this limit, to achieve the full version of the injected function stripsql$string $search =...

CVE-2011-3699

John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/test-active-record.php and certain other files...

Information disclosure

John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/test-active-record.php and certain other files...

PT-2011-4589

Name of the Vulnerable Software and Affected Versions ADOdb Library for PHP version 5.11 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, this ca...