16798 matches found
CVE-2025-7588 PHPGurukul Dairy Farm Shop Management System edit-product.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This affects an unknown part of the file edit-product.php. The manipulation of the argument productname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...
CVE-2025-7588
The CVE-2025-7588 entry affects PHPGurukul Dairy Farm Shop Management System v1.3. A SQL injection vulnerability exists in the edit-product.php file via the productname parameter, with remote exploit viability and public disclosure. Impact is described as allowing data disclosure/inference and po...
CVE-2025-7587
CVE-2025-7587 affects code-projects Online Appointment Booking System 1.0 . The vulnerability is a SQL injection in the unknown functionality of the file /cover.php , triggered by manipulating the uname/psw parameter. It is remotely exploitable and has been disclosed publicly (exploit maturity: P...
CVE-2025-7582
CVE-2025-7582 concerns PHPGurukul Online Fire Reporting System 1.2, with a SQL injection in the file /admin/assigned-requests.php. The vulnerability is triggered by manipulating the teamid parameter, enabling remote exploitation. Multiple connected records corroborate the issue as SQL injection o...
CVE-2025-7580 code-projects Voting System positions_row.php sql injection
A vulnerability classified as critical was found in code-projects Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/positionsrow.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has bee...
CVE-2025-7563 PHPGurukul Online Fire Reporting System completed-requests.php sql injection
A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of the file /admin/completed-requests.php. The manipulation of the argument teamid leads to sql injection. The attack can be launched remotel...
CVE-2025-7562
PHPGurukul Online Fire Reporting System 1.2 contains a SQL injection in the teamid parameter of /admin/new-requests.php. The vulnerability is exploitable remotely and has been publicly disclosed. Affected component is the /admin/new-requests.php file; root cause is lack of input validation for te...
CVE-2025-7561 PHPGurukul Online Fire Reporting System team-ontheway-requests.php sql injection
A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. This issue affects some unknown processing of the file /admin/team-ontheway-requests.php. The manipulation of the argument teamid leads to sql injection. The attack may be initiated remotely...
CVE-2025-7560 PHPGurukul Online Fire Reporting System workin-progress-requests.php sql injection
A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. This vulnerability affects unknown code of the file /admin/workin-progress-requests.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely...
CVE-2025-7560 PHPGurukul Online Fire Reporting System workin-progress-requests.php sql injection
A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. This vulnerability affects unknown code of the file /admin/workin-progress-requests.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely...
CVE-2025-7559 PHPGurukul Online Fire Reporting System bwdates-report-result.php sql injection
A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. This affects an unknown part of the file /admin/bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack...
CVE-2025-7557 code-projects Voting System voters_row.php sql injection
A vulnerability has been found in code-projects Voting System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/votersrow.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...
CVE-2025-7557
CVE-2025-7557 affects code-projects Voting System 1.0. The vulnerable component is the file /admin/voters_row.php where the input parameter id is concatenated into an SQL statement, causing an SQL injection. Multiple connected sources confirm remote, unauthenticated exploitation with the possibil...
CVE-2025-7555 code-projects Voting System voters_add.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/votersadd.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The...
PT-2025-29464 · Avl Rooms · Avl Rooms
Name of the Vulnerable Software and Affected Versions: AVL Rooms version 1.0 Description: A critical issue exists in AVL Rooms that allows for SQL injection. The vulnerability is located in the /city.php file, where manipulation of the city argument can trigger the attack remotely. The exploit fo...
CVE-2025-51652
Summary: CVE-2025-51652 affects SemCms v5.0, where a SQL injection can be triggered via the pid parameter in SEMCMS_Categories.php. The vulnerability is confirmed across multiple sources (NVD, Red Hat, CVE list, PT Security, CNNVD, etc.). Impact: confidentiality and integrity impacts are listed a...
CVE-2025-51658
SemCms v5.0 contains a SQL injection vulnerability via the ID parameter in SEMCMS_InquiryView.php. Affected component: SemCms (PHP CMS). Root cause: unsafely interpolated ID parameter in a query, enabling unauthorized access or data exposure. CVSS base score 5.4 (Medium) with network attack vecto...
PT-2025-29471 · Code Projects · Wedding Reservation
Name of the Vulnerable Software and Affected Versions: code-projects Wedding Reservation version 1.0 Description: A critical issue exists in code-projects Wedding Reservation 1.0, affecting an unknown part of the file /global.php. The manipulation of the argument lu leads to SQL injection, allowi...
PT-2025-29440 · Code Projects · Online Appointment Booking System
Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System 1.0. The vulnerability is due to a SQL injection flaw within an unknown functionality of the...
PT-2025-29443 · Phpgurukul · Phpgurukul Dairy Farm Shop Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical issue exists in PHPGurukul Dairy Farm Shop Management System 1.3, affecting the processing of the edit-category.php file. Manipulation of the categorycode argume...