CVE-2026-47228

Admidio is an open-source user management solution. modules/registration.php mode sendlogin regenerates a random password for useruuidassigned, stores its bcrypt hash in admusers.usrpassword, and emails the cleartext to that user. Every other state-changing mode in the same file assignmember,...

CVE-2026-2154

The CVE describes a cross-site scripting (XSS) vulnerability in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0, affecting the Patient Registration Module via /registration.php. The vulnerability stems from manipulating the First Name parameter, enabling remote expl...

CVE-2025-11582 code-projects Online Job Search Engine registration.php sql injection

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

EUVD-2023-55496

Malicious code in bioql PyPI...

EUVD-2024-17554

Malicious code in bioql PyPI...

EUVD-2025-9677

Malicious code in bioql PyPI...

EUVD-2025-12583

Malicious code in bioql PyPI...

CVE-2025-57147

A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack of input validation of multiple parameters including fullname, email, and contactno in user/registration.php...

CVE-2025-9834

PHPGurukul Small CRM 4.0 contains a cross-site scripting vulnerability in the registration.php file, triggered by manipulating the Username parameter. The issue is exploitable remotely and an exploit has been published. Multiple connected sources (including PT-Security and Red Hat/NVD entries) co...

CVE-2025-7170 code-projects Crime Reporting System registration.php sql injection

A vulnerability classified as critical was found in code-projects Crime Reporting System 1.0. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit ha...

CVE-2025-6917 code-projects Online Hotel Booking registration.php sql injection

A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/registration.php. The manipulation of the argument uname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-6917 code-projects Online Hotel Booking registration.php sql injection

A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/registration.php. The manipulation of the argument uname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-6917

CVE-2025-6917 affects code-projects Online Hotel Booking 1.0. The vulnerability is a SQL injection in the unknown code of the file /admin/registration.php, triggered by manipulating the uname parameter. Exploitation can be performed remotely and public exploit information exists. Several sources ...

CVE-2025-5603

A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument fullname/username leads to sql injection. The attack can be launched...

CVE-2025-5603 Campcodes Hospital Management System registration.php sql injection

A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument fullname/username leads to sql injection. The attack can be launched...

CVE-2024-46300

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

CVE-2023-46581

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...

CVE-2025-4025

A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploi...

CVE-2025-4025

The CVE-2025-4025 entry concerns the iSourcecode Placement Management System (version 1.0). Affected component is the file /registration.php where manipulation of the Name parameter leads to an SQL injection. The vulnerability is exploitable remotely and has been disclosed publicly; multiple sour...

CVE-2025-4025 itsourcecode Placement Management System registration.php sql injection

A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploi...