16798 matches found
CVE-2023-41521
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...
PT-2025-32292 · Unknown · Attendance Management System
Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to a SQL injection issue through the username parameter located at the /index.php API endpoint. Recommendations: As a temporar...
CVE-2023-41527
CVE-2023-41527 affects Hospital Management System v4 and is a SQL injection vulnerability in the password2 parameter of func.php. The issue arises from improper handling of user-supplied input, enabling attackers to manipulate SQL queries and potentially access or modify the database. Exploitatio...
CVE-2023-41527
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...
CVE-2023-41524
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...
CVE-2023-41523
The CVE-2023-41523 entry maps to the Student Attendance Management System v1, which contains a SQL injection in the createClassTeacher.php endpoint that reads the emailAddress parameter. The vulnerability is described as an injection flaw that can affect the application’s database queries; CVSSv3...
CVE-2023-41526
CVE-2023-41526 affects Hospital Management System v4, with multiple SQL injection flaws in func1.php exposed via username3 and password3 parameters. Root cause: improper handling of user-supplied input leading to unauthenticated data access? and high risk per CVSS 3.1 metrics (CRITICAL, 9.8). Aff...
PT-2025-32318 · Wanzhou · Woes Intelligent Optimization Energy Saving System
Name of the Vulnerable Software and Affected Versions: Wanzhou WOES Intelligent Optimization Energy Saving System version 1.0 Description: A vulnerability exists in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. The issue involves SQL injection due to the manipulation of the...
PT-2025-32301 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection due to the doctor contact parameter in the doctorsearch.php file. Recommendations: As a temporary workaround, consider...
CVE-2023-41527
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...
CVE-2023-41525
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...
CVE-2023-41525
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...
CVE-2023-41532
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...
CVE-2023-41532
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...
CVE-2023-41532
Hospital Management System v4 has a SQL injection vulnerability in the doctorsearch.php endpoint via the doctor_contact parameter. Affected component is the query construction in doctorsearch.php; root cause is lack of input sanitization. CVSS v3.1 base score 8.8 (HIGH) with network attack vector...
CVE-2023-41525
CVE-2023-41525 affects Hospital Management System v4, with a SQL injection in the Patient Search Module via the patient_contact parameter in patientsearch.php. The CVSS v3.1 vector shows Network access, no privileges, high impact on confidentiality, integrity, and availability (base score 9.8). S...
CVE-2023-40992
Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter. Root cause: insufficient input validation in the password2 field allows unparameterized SQL to be constructed. Potential impact (as stated in the sources): una...
CVE-2023-41530
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...
PT-2025-32291 · Unknown · Attendance Management System
Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to a SQL injection issue through the emailAddress parameter at the createClassTeacher.php endpoint. Recommendations: As a...