CVE-2025-4456: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

PT-2025-20459 · Unknown · Project Worlds Car Rental Project

Name of the Vulnerable Software and Affected Versions: Project Worlds Car Rental Project version 1.0 Description: A critical vulnerability has been found in the Project Worlds Car Rental Project. The issue affects an unknown function of the file /signup.php. The manipulation of the fname argument...

CVE-2025-3151: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signup.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit ha...

CVE-2025-1355: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /signup.php of the component Add Picture. The manipulation leads to unrestricted upload. The attack can be launched remotely. Th...

CVE-2025-0844

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file signup.php of the component Registration Page. The manipulation of the argument firstname/lastname/email/borrow/useraddress...

CVE-2025-0844: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file signup.php of the component Registration Page. The manipulation of the argument firstname/lastname/email/borrow/useraddress...

PT-2024-36439

Name of the Vulnerable Software and Affected Versions Kashipara E-learning Management System version 1.0 Description A SQL Injection issue was discovered in the /student signup.php file, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized database access. The usernam...

CVE-2024-11818: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-11818

CVE-2024-11818 affects PHPGurukul User Registration & Login and User Management System 1.0. The vulnerability is in /signup.php where manipulating the email parameter causes SQL injection. It is exploitable remotely and has been disclosed publicly. Connected sources also note a recommended tempor...

CVE-2024-11818 PHPGurukul User Registration & Login and User Management System signup.php sql injection

A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-11818 PHPGurukul User Registration & Login and User Management System signup.php sql injection

A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-11243

A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument m2 with the input leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-11243: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument m2 with the input leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-10702 code-projects Simple Car Rental System signup.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

Code-Projects Simple Car Rental System SQL Injection Vulnerability

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A SQL injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter fname in the file /signup.php that can lead to SQL injection...

CVE-2024-10702: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2024-7321: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack c...

CVE-2024-6808

The CVE-2024-6808 entry concerns itsourcecode Simple Task List 1.0. A flaw in signUp.php’s insertUserRecord allows SQL injection via the username argument, with remote exploitation possible and publicly disclosed exploits. Multiple connected sources corroborate the core details (affected componen...

CVE-2024-6808 itsourcecode Simple Task List signUp.php insertUserRecord sql injection

A vulnerability was found in itsourcecode Simple Task List 1.0. It has been classified as critical. This affects the function insertUserRecord of the file signUp.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-6808 itsourcecode Simple Task List signUp.php insertUserRecord sql injection

A vulnerability was found in itsourcecode Simple Task List 1.0. It has been classified as critical. This affects the function insertUserRecord of the file signUp.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has...