CVE-2026-19748

CVE-2026-19748 affects Tenda CH7/CH7G/CH10/CP3/CP3 Pro/CP7/TC3B14C/TC3B15C/TC3T14C/TC3T15C. The vulnerability concerns the function CWebSessionManager_ParseSession in the Kylin Web Service, specifically in the file /user/bin/Kylin. The issue is described as leading to insufficient entropy in the ...

CVE-2025-9307

A flaw has been found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /admin/session.php. This manipulation of the argument sesssion causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

PT-2025-27454 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.2 Description: A critical vulnerability has been found in the PHPGurukul Student Record System, affecting some unknown functionality of the file /register.php. The manipulation of the session argumen...

PT-2025-27444 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.2 Description: A critical issue was found in the PHPGurukul Student Record System, affecting an unknown part of the file /session.php. The manipulation of the session argument leads to SQL injection...

CVE-2017-20163

A vulnerability has been found in Red Snapper NView and classified as critical. This vulnerability affects the function mutate of the file src/Session.php. The manipulation of the argument session leads to sql injection. The name of the patch is cbd255f55d476b29e5680f66f48c73ddb3d416a8. It is...