CVE-2024-25202

CVE-2024-25202 A vulnerability was found in PHPgurukul visitor management system 1.0. it has been rated as problemic. Affected by the issue is some unknown functionality of the file search bar that called search-result.php and search-visitor.php . The vulnerability is Cross-Site-Scripting XSS...

PT-2026-97123

Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.x through 5.5.3-182 Description An issue exists in the photo search endpoint search result.php where the query parameter is passed unsanitized into SQL WHERE and ORDER BY clauses. This allows unauthenticated attackers to...

WANem result.php RCE (CVE-2012-10041)

Exploits CVE-2012-10041 command injection in WANem result.php via the pc parameter. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """WANem result.php command injection RCE CVE-2012-10041 — execute session.""" from future import annotations import re from...

WANem - result.php RCE Detection (CVE-2012-10041)

Detects CVE-2012-10041 by requesting /WANem/result.php?pc=127.0.0.1;/UNIONFS/home/perc/dosu%20id%26. !/usr/bin/env python3 -- coding: utf-8 -- """WANem result.php command injection CVE-2012-10041.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CVE-2026-14766

CVE-2026-14766 affects CodeAstro Apartment Visitor Management System 1.0. The vulnerability targets the POST Parameter Handler, specifically the /apartment-visitor/search-result.php endpoint, where manipulation of the searchdata parameter leads to SQL injection. According to the sources, exploita...

CVE-2026-4189: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in phpipam up to 1.7.4. The impacted element is an unknown function of the file app/admin/sections/edit-result.php of the component Section Handler. Executing a manipulation of the argument subnetOrdering can lead to sql injection. The attack may be launched remotel...

CVE-2026-3487: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/class-result.php. Performing a manipulation of the argument coursecode results in sql injection. The attack can be initiated remotely. The exploit has been made...

CVE-2025-61078: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructions parameter for the /app/admin/instructions/edit-result.php endpoint...

CVE-2024-44663

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php...

CVE-2024-44663: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php...

CVE-2024-44663

The PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection due to a lack of validation for externally entered SQL statements in the product parameter of the search-result.php file. An attacker can exploit this flaw by sending crafted SQL queries to execute illegal commands and poten...

EUVD-2017-8742

Malware in sbrugna...

EUVD-2017-8728

Malware in sbrugna...

EUVD-2008-6078

Malware in sbrugna...

EUVD-2019-7248

Malware in sbrugna...

EUVD-2023-44161

Malicious code in bioql PyPI...

CVE-2025-8988: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester COVID 19 Testing Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-8986: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2012-10041: Improper Neutralization of Special Elements used in an OS Command

WAN Emulator v2.3 contains two unauthenticated command execution vulnerabilities. The result.php script calls shellexec with unsanitized input from the pc POST parameter, allowing remote attackers to execute arbitrary commands as the www-data user. The system also includes a SUID-root binary name...

CVE-2025-8134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The...