CVE-2025-4027: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/rules.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit...

PHPGurukul Old Age Home Management System 安全漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul. A security vulnerability exists in version 1.0 of the PHPGurukul Old Age Home Management System, which results from SQL injection due to incorrect manipulation of the parameter pagetitle in the file...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation in the map items in print-alert-rules.php, which allows a remote attacker to inject and execute malicious JavaScript into the system...

PT-2019-14996

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.3 Description The issue affects the Lifestyle demographic filter criteria in library/clinical rules.php, which is part of the library/patient.inc. This is due to SQL Injection. Recommendations For OpenEMR versions...

PT-2018-11310

Name of the Vulnerable Software and Affected Versions SLiMS versions 8.3.1 Description A Reflected Cross-Site Scripting XSS issue exists in the Circulation module. The issue is related to a URI in the admin/modules/circulation/loan rules.php file, specifically with the keywords parameter...

PT-2015-5700

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters in different PHP files, including status captiveportal.php, firewall rules.php, firewall shaper.php,...