CirCarLife Scada <4.3 - System Log Exposure Detection

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. CirCarLife is an internet-connected electric vehicle charging station. !/usr/bin/env python3 -- coding: utf-8 -- """CirCarLife Scada before...

EUVD-2020-23040

Malware in sbrugna...

EUVD-2023-44305

Malicious code in bioql PyPI...

CVE-2025-8179

Summary: CVE-2025-8179 affects PHPGurukul Local Services Search Engine Management System 2.1. An SQL injection exists in an unknown function of /admin/changeimage.php, triggered by manipulating the editid parameter. The vulnerability is exploitable remotely, and publicly disclosed exploits exist....

CVE-2023-3657

A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. This issue affects some unknown processing of the file Master.php?f=savebook of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injectio...

CVE-2023-2409

A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. This affects an unknown part of the file /admin/services/viewservice.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. T...

CVE-2025-2655

SourceCodester AC Repair and Services System 1.0 is affected by CVE-2025-2655. The vulnerability resides in the save_users and delete_users functions in /classes/Users.php, where manipulation of the ID argument yields an SQL injection. The issue allows remote exploitation and, per the public disc...

CVE-2025-2655: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-2654: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manageservice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

PT-2025-12540

Name of the Vulnerable Software and Affected Versions SourceCodester AC Repair and Services System version 1.0 Description A critical issue has been found in the system, affecting an unknown part of the file /admin/services/manage service.php. The manipulation of the ID argument leads to SQL...

AC Repair and Services System v1.0 - Multiple SQL Injection Vulnerability

Exploit Title: AC Repair and Services System v1.0 - Multiple SQL Injection Exploit Author: Gnanaraj Mauviel @0xm3m Vendor: oretnom23 Vendor Homepage: https://www.sourcecodester.com/php/16513/ac-repair-and-services-system-using-php-and-mysql-source-code-free-download.html Software Link:...

CVE-2023-5021

A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file admin/?page=systeminfo/contactinformation. The manipulation of the argument telephone/mobile/address leads to cross site scripting. It i...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file admin/?page=systeminfo/contactinformation. The manipulation of the argument telephone/mobile/address leads to cross site scripting. It i...

CVE-2023-5021 SourceCodester AC Repair and Services System cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file admin/?page=systeminfo/contactinformation. The manipulation of the argument telephone/mobile/address leads to cross site scripting. It i...

CVE-2023-5021: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file admin/?page=systeminfo/contactinformation. The manipulation of the argument telephone/mobile/address leads to cross site scripting. It i...

PT-2023-31500

Name of the Vulnerable Software and Affected Versions SourceCodester AC Repair and Services System version 1.0 Description A problematic issue was found in the system, affecting an unknown function of the file "admin/?page=system info/contact information". The manipulation of the telephone, mobil...

CVE-2023-3678

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=deleteinquiry of the component HTTP POST Request Handler. The manipulation of the argument ...

CVE-2023-3678

CVE-2023-3678 affects SourceCodester AC Repair and Services System 1.0. The vulnerability resides in the HTTP POST Request Handler at /classes/Master.php?f=delete_inquiry where the id argument is manipulated to yield an SQL injection. Descriptions consistently state remote exploitation and a crit...

CVE-2023-3678: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=deleteinquiry of the component HTTP POST Request Handler. The manipulation of the argument ...

Sql injection

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...