CVE-2025-3018

CVE-2025-3018 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability exists in an unknown function of the file /classes/Users.php?f=delete, where manipulation of the ID parameter leads to SQL injection. It is possible to exploit remotely; the exploit has been disclosed publicly. Connec...

CVE-2025-2847 Codezips Gym Management System over_month.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/overmonth.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-2734

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2025-2676

PHPGurukul Bank Locker Management System 1.0 contains a SQL injection in /add-subadmin.php caused by improper handling of the sadminusername parameter. The issue is remotely exploitable and has public disclosure. No fixed version or remediation details are provided in the connected documents.

CVE-2025-2663 PHPGurukul Bank Locker Management System search-locker-details.php sql injection

A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /search-locker-details.php. The manipulation of the argument searchinput leads to sql injection. The attack can be...

CVE-2025-2647

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-2641

CVE-2025-2641 affects PHPGurukul Art Gallery Management System 1.0; /admin/edit-artist-detail.php?editid=1 exposes SQL injection via the Name parameter due to insufficient input validation. Impact is high (confidentiality, integrity, availability). Exploitation may be remote; public disclosure no...

CVE-2025-2587

CVE-2025-2587 affects Jinher OA C6 1.0. The vulnerability is in IncentivePlanFulfillAppprove.aspx where manipulation of the httpOID parameter enables SQL injection. Attack can be initiated remotely; exploitation has been publicly disclosed. Affected component is the file IncentivePlanFulfillApppr...

CVE-2025-2372

A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the file /password-recovery.php of the component Password Recovery Page. The manipulation of the argument username leads to sql injection. It is...

CVE-2025-2392 code-projects Online Class and Exam Scheduling System activate.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

CVE-2025-2381

A vulnerability classified as critical has been found in PHPGurukul Curfew e-Pass Management System 1.0. Affected is an unknown function of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-2378

A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been classified as critical. This affects an unknown part of the file /download-medical-cards.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-2132

A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/index.php/web/ajaxalllists of the component Search. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

CVE-2025-2052

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-2051

The CVE-2025-2051 entry relates to PHPGurukul Apartment Visitors Management System 1.0 and a SQL injection in the searchdata parameter of /search-visitor.php. The flaw allows remote exploitation and is caused by improper validation/external SQL statement handling. Public disclosure is noted. Conn...

PT-2025-10035 · Unknown · Projectworlds Life Insurance Management System

Name of the Vulnerable Software and Affected Versions: projectworlds Life Insurance Management System version 1.0 Description: A critical vulnerability was found in the projectworlds Life Insurance Management System. The issue affects an unknown functionality of the file /deleteNominee.php, where...

PT-2025-10038 · Unknown · Projectworlds Life Insurance Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Life Insurance Management System version 1.0 Description: A critical vulnerability has been found in the Projectworlds Life Insurance Management System. This issue affects the file /updateAgent.php, where the manipulation of the...

CVE-2025-2039

The CVE-2025-2039 entry concerns code-projects Blood Bank Management System 1.0. Affected is an unknown function of /admin/delete_members.php where manipulation of the member_id parameter enables SQL injection. The vulnerability can be exploited remotely and exploits have been disclosed publicly....

CVE-2025-2034

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-class.php?cid=1. The manipulation of the argument classname/capacity/classtiming leads to sql injection. The...

CVE-2025-1965 projectworlds Online Hotel Booking login.php sql injection

A vulnerability classified as critical has been found in projectworlds Online Hotel Booking 1.0. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument emailusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been...