CVE-2025-11659

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of the file /assets/uploadNotes.php. This manipulation of the argument File causes unrestricted upload. Remote...

CVE-2025-11658

A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected is an unknown function of the file /assets/changeSllyabus.php. The manipulation of the argument File results in unrestricted upload. The attack may be launched...

CVE-2025-11659

ProjectsAndPrograms School Management System is affected by CVE-2025-11659 due to a flaw in the /assets/uploadNotes.php File parameter, enabling unrestricted file upload. Reports indicate remote exploitation is possible and an exploit has been published. The issue stems from insufficient validati...

CVE-2025-11657

CVE-2025-11657 affects ProjectsAndPrograms School Management System, up to version 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The vulnerability is in the /assets/createNotice.php script where manipulation of the File parameter enables unrestricted file uploads. This can be triggered remotely and i...

PT-2025-41746

Name of the Vulnerable Software and Affected Versions ProjectsAndPrograms School Management System versions prior to 6b6fae5426044f89c08d0dd101c7fa71f9042a59 Description A security flaw exists in ProjectsAndPrograms School Management System that allows unrestricted file upload. The issue is locat...

PT-2025-41752

Name of the Vulnerable Software and Affected Versions ProjectsAndPrograms School Management System versions prior to commit hash 6b6fae5426044f89c08d0dd101c7fa71f9042a59 Description A flaw exists in ProjectsAndPrograms School Management System that allows attackers to bypass authentication. This ...

PT-2025-41748

Name of the Vulnerable Software and Affected Versions ProjectsAndPrograms School Management System versions prior to 6b6fae5426044f89c08d0dd101c7fa71f9042a59 Description A security issue exists in ProjectsAndPrograms School Management System related to unrestricted file upload. This is due to...

CVE-2025-11628

A flaw has been found in jimit105 Project-Online-Shopping-Website up to 7d892f442bd8a96dd242dbe2b9bd5ed641e13e64. This affects an unknown function of the file /delete.php of the component Product Inventory Handler. This manipulation of the argument productcode causes sql injection. It is possible...

PT-2025-41706

Name of the Vulnerable Software and Affected Versions jimit105 Project-Online-Shopping-Website versions up to 7d892f442bd8a96dd242dbe2b9bd5ed641e13e64 Description A flaw exists in the Product Inventory Handler component of jimit105 Project-Online-Shopping-Website. The issue involves a SQL injecti...

CVE-2025-11606

A security flaw has been discovered in iPynch Social Network Website up to b6933b6d7f82c84819abe458ccf0e59d61119541. The affected element is an unknown function of the component Search. Performing manipulation results in sql injection. The attack is possible to be carried out remotely. The exploi...

CVE-2025-11606

Summary: CVE-2025-11606 affects the iPynch Social Network Website, specifically the Search component. Concrete details from connected documents show that manipulating an unknown function within the Search component enables SQL injection, exploitable remotely, with an exploit publicly released. Th...

CVE-2025-11606 iPynch Social Network Website Search sql injection

A security flaw has been discovered in iPynch Social Network Website up to b6933b6d7f82c84819abe458ccf0e59d61119541. The affected element is an unknown function of the component Search. Performing manipulation results in sql injection. The attack is possible to be carried out remotely. The exploi...

CVE-2025-11594

A vulnerability has been found in ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore Website up to 0e0b9f542f7a2d90a8d7f8c83caca69294e234e4. This issue affects some unknown processing of the file /index.php of the component Quantity Handler. Such manipulation leads to improper validati...

PT-2025-41692

Name of the Vulnerable Software and Affected Versions iPynch Social Network Website versions prior to b6933b6d7f82c84819abe458ccf0e59d61119541 Description A security flaw exists in the Search component of iPynch Social Network Website. Manipulation of an unknown function within this component can...

EUVD-2025-33299

A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an unknown function of the file /donateblood.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be...

CVE-2025-11481

CVE-2025-11481 affects the Blood-Bank-And-Donation-Management-System (varunsardana004) with the flaw in /donate_blood.php where manipulating the fullname parameter leads to SQL injection. The Red Hat/NVD entries describe remote exploitation and indicate the exploit has been published; the product...

PT-2025-41288

Name of the Vulnerable Software and Affected Versions varunsardana004 Blood-Bank-And-Donation-Management-System versions prior to dc9e0393d826fbc85fad9755b5bc12cba1919df2 Description A flaw exists in the Blood-Bank-And-Donation-Management-System that allows for sql injection. The issue is located...

CVE-2025-11319

A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some unknown processing of the file /delete.php. This manipulation of the argument ai causes sql injection. It is possible to initiate the atta...

EUVD-2025-32531

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

CVE-2025-11333

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...