72 matches found
CVE-2024-25202
CVE-2024-25202 在PHPgurukul访客管理系统1.0中发现了一个漏洞。它被评为有问题的。该问题影响了文件搜索栏的某个未知功能,该功能调用了search-result.php和search-visitor.php。该漏洞是跨站脚本(XSS)漏洞。 使用方法 PHPGURUKUL中另一个漏洞发现是认证会话中的SQL注入。 登录 登录账户或通过SQL注入绕过认证后,我们需要转到右上角的搜索管理。 Payload '" 正如您所见,我将在搜索会话中搜索代码。 XSS弹窗 根据场景,XSS漏洞在search-visitor或search-bar.php中有效。...
CVE-2026-14766
CVE-2026-14766 affects CodeAstro Apartment Visitor Management System 1.0. The vulnerability targets the POST Parameter Handler, specifically the /apartment-visitor/search-result.php endpoint, where manipulation of the searchdata parameter leads to SQL injection. According to the sources, exploita...
CVE-2024-44663
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php...
CVE-2024-44663
PHPGurukul Online Shopping Portal 2.0 is affected by a SQL Injection vulnerability in the search-result.php file, exploitable via the product parameter. The root cause is lack of input validation for externally supplied SQL in the product parameter, as reported across multiple sources (CNVD/CNNVD...
EUVD-2017-8742
Malware in sbrugna...
EUVD-2008-6078
Malware in sbrugna...
EUVD-2019-7248
Malware in sbrugna...
EUVD-2017-8728
Malware in sbrugna...
EUVD-2023-44161
Malicious code in bioql PyPI...
CVE-2025-5694 PHPGurukul Human Metapneumovirus Testing Management System search-report-result.php sql injection
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack ma...
SourceCodester Apartment Visitor Management System 注入漏洞
SourceCodester Apartment Visitor Management System is a SourceCodester open source apartment visitor management system. SourceCodester Apartment Visitor Management System version 1.0 has an injection vulnerability, the vulnerability stems from the parameter searchdata operation in the file...
CVE-2025-3972 PHPGurukul COVID19 Testing Management System bwdates-report-result.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-report-result.php. The manipulation of the argument todate leads to sql injection. The attack may be...
CVE-2025-3242
CVE-2025-3242 affects PHPGurukul e-Diary Management System 1.0, with a vulnerability in the file /search-result.php where manipulating the searchdata parameter enables SQL injection. The issue is exploitable remotely and has been publicly disclosed. Multiple connected sources reiterate that the a...
CVE-2025-1894
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...
CVE-2025-1894 PHPGurukul Restaurant Table Booking System search-result.php sql injection
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...
CVE-2025-1580
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack...
CVE-2025-1580 PHPGurukul Nipah Virus Testing Management System search-report-result.php sql injection
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack...
CVE-2025-1578 PHPGurukul/Campcodes Online Shopping Portal search-result.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping Portal 2.1. This affects an unknown part of the file /search-result.php. The manipulation of the argument Product leads to sql injection. It is possible to initiate the attack remotely. The exploi...
CVE-2024-4915
CVE-2024-4915 affects Campcodes Online Examination System 1.0, with the vulnerability located in the file result.php and triggered by manipulating the id argument to cause SQL injection. Descriptions across sources (NVD, CVE listings, Vuln enrichment, PT-Security) confirm remote exploitation pote...
CVE-2023-7099
A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiate...