Lucene search
+L

5 matches found

Cvelist
Cvelist
•added 2025/04/28 9:31 p.m.•57 views

CVE-2025-4039 PHPGurukul Rail Pass Management System search-pass.php sql injection

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...

7.5CVSS0.00562EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•8 views

CVE-2025-4039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/17 2:31 p.m.•28 views

CVE-2025-2381 PHPGurukul Curfew e-Pass Management System search-pass.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Curfew e-Pass Management System 1.0. Affected is an unknown function of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploi...

7.5CVSS7AI score0.00544EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•7 views

PT-2025-11505

Name of the Vulnerable Software and Affected Versions PHPGurukul Curfew e-Pass Management System version 1.0 Description A critical vulnerability has been found in the PHPGurukul Curfew e-Pass Management System. The issue is related to an unknown function of the file /admin/search-pass.php, where...

9.8CVSS6.8AI score0.00544EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/22 12:00 a.m.•10 views

CVE-2022-36198: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.php, and...

9.8CVSS8.3AI score0.01215EPSS
SaveExploits1References2
Rows per page
Query Builder