CVE-2025-8179: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. The attack can be...

CVE-2025-6863: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/edit-category-detail.php. The manipulation of the argument editid leads to sql injection. The attack can...

PHPGurukul Local Services Search Engine Management System Injection Vulnerability

PHPGurukul Local Services Search Engine Management System is a local services search engine management system from PHPGurukul, Inc. An injection vulnerability exists in version 2.1 of the PHPGurukul Local Services Search Engine Management System, which originates from a SQL injection due to...

CVE-2025-5759: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. This vulnerability affects unknown code of the file /admin/edit-person-detail.php?editid=2. The manipulation of the argument editid leads to sql injection. The attack can be initiate...

CVE-2021-3278

Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection . Using this vulnerability, an attacker can bypass the login page...

PT-2025-11518

Name of the Vulnerable Software and Affected Versions PHPGurukul Local Services Search Engine Management System version 1.0 Description A critical issue affects the processing of the file /serviceman-search.php, where the manipulation of the location argument leads to SQL injection. This issue ca...

CVE-2025-2386: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Local Services Search Engine Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /serviceman-search.php. The manipulation of the argument location leads to sql injection. The attack may be initiated...

PHPGurukul Local Services Search Engine Management System security vulnerability

PHPGurukul Local Services Search Engine Management System is a local services search engine management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Local Services Search Engine Management System version 1.0, which stems from an incorrect manipulation of the parameter...

CVE-2023-3005

A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=savearea of the component POST Parameter Handler. The manipulation of the argument area with the inp...

CVE-2023-3005 SourceCodester Local Service Search Engine Management System POST Parameter cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=savearea of the component POST Parameter Handler. The manipulation of the argument area with the inp...

CVE-2023-3005: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=savearea of the component POST Parameter Handler. The manipulation of the argument area with the inp...

CVE-2021-28000

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...

Sql injection

A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System Project 1.0. This vulnerability gives admin users the ability to dump all data from the database...

CVE-2021-28000

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...

CVE-2021-27999

CVE-2021-27999 affects Local Services Search Engine Management System Project 1.0. The vulnerability is a SQL injection in the editid parameter that enables admins to dump all data from the database. Exploitation details are not provided beyond the description; no patch/version is specified in th...

CVE-2021-27999: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System Project 1.0. This vulnerability gives admin users the ability to dump all data from the database...

PT-2021-17706

Name of the Vulnerable Software and Affected Versions: Local Services Search Engine Management System Project version 1.0 Description: A persistent cross-site scripting issue was discovered, allowing remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address...

PT-2021-17705

Name of the Vulnerable Software and Affected Versions: Local Services Search Engine Management System Project version 1.0 Description: A SQL injection vulnerability was discovered in the editid parameter. This issue allows admin users to dump all data from the database. Recommendations: For Local...

CVE-2021-28000: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...

Local Services Search Engine Management System (LSSMES) 1.0 - Blind & Error based SQL injection (Authenticated)

Exploit Title: Local Services Search Engine Management System LSSMES 1.0 - Blind & Error based SQL injection Authenticated Date: 2021-03-02 Exploit Author: Tushar Vaidya Vendor Homepage: https://phpgurukul.com/local-services-search-engine-management-system-using-php-and-mysql/ Software Link:...