CVE-2025-4712

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/accountsummary.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2025-4704

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...

CVE-2025-4553

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may...

CVE-2025-4550

A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects some unknown processing of the file /admin/pass-details.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated...

CVE-2025-4541

CVE-2025-4541 affects LmxCMS 1.41. The vulnerability is in the function manageZt of the file c/admin/ZtAction.class.php within the POST Request Handler. Manipulation of the sortid argument enables SQL injection, with remote exploitation possible and a public exploit present. Multiple sources conf...

CVE-2025-4541 LmxCMS POST Request ZtAction.class.php manageZt sql injection

A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\admin\ZtAction.class.php of the component POST Request Handler. The manipulation of the argument sortid leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4508

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-4490 Campcodes Online Food Ordering System view-ticket-admin.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /view-ticket-admin.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-4487 itsourcecode Gym Management System ajax.php sql injection

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deletemember. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-4467

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack...

CVE-2025-4332

A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /visitor-detail.php. The manipulation of the argument editid/remark leads to sql injection. The attack may be launched remotel...

CVE-2025-4358

CVE-2025-4358 affects PHPGurukul Company Visitor Management System 2.0, with SQL injection in /admin-profile.php via manipulated adminname or mobilenumber. Multiple connected sources confirm remote exploitation potential and that the exploit has been publicly disclosed. Affected component is an u...

CVE-2025-4311

CVE-2025-4311 affects itsourcecode Content Management System 1.0. The vulnerability resides in the /admin/update_main_topic_img.php?topic_id=529 endpoint, where manipulation of the topic_id parameter enables SQL injection. Exploitation is possible remotely, and public disclosure exists. Multiple ...

CVE-2025-4303

CVE-2025-4303 affects PHPGurukul Human Metapneumovirus Testing Management System 1.0. The vulnerability is in the file /add-phlebotomist.php where manipulation of the empid parameter enables SQL injection, with remote exploitation reported. Remediation guidance from available sources suggests dis...

CVE-2025-4300

CVE-2025-4300 affects itsourcecode Content Management System 1.0. The vulnerability is a SQL injection in an unknown function within /search_list.php triggered by manipulating the Search parameter. It is exploitable remotely and multiple sources state the exploit has been publicly disclosed. Tech...

PT-2025-19811 · Unknown · Isourcecode Content Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Content Management System version 1.0 Description: A critical vulnerability has been found in the itsourcecode Content Management System. The issue affects an unknown function of the file /search list.php. The manipulation of the...

PT-2025-19812 · Unknown · Isourcecode Content Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Content Management System version 1.0 Description: A critical vulnerability was found in the iSourcecode Content Management System. The issue affects an unknown functionality of the file /search-notice.php. The manipulation of the...

CVE-2025-4241 PHPGurukul Teacher Subject Allocation Management System search.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. Th...

CVE-2025-4108

A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /add-subject.php. The manipulation of the argument sub1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4072

A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit-nurse.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...