CVE-2025-6875

The CVE-2025-6875 issue affects SourceCodester Best Salon Management System 1.0. Affected functionality is in the file /panel/edit-subscription.php, where manipulating the editid parameter leads to an SQL injection. The vulnerability permits remote exploitation and has been disclosed publicly. Mu...

CVE-2025-6874

CVE-2025-6874 affects SourceCodester Best Salon Management System v1.0. The vulnerability resides in the file /panel/add_subscribe.php , where manipulating the parameters user_id/plan_id leads to a SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. If exploit...

CVE-2025-6874 SourceCodester Best Salon Management System add_subscribe.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/addsubscribe.php. The manipulation of the argument userid/planid leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-6871 SourceCodester Simple Company Website Login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Simple Company Website 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-6869

CVE-2025-6869 affects SourceCodester Simple Company Website 1.0. The file /admin/testimonials/manage.php is vulnerable via manipulation of the ID argument, leading to SQL injection. The vulnerability can be exploited remotely and has been publicly disclosed. Multiple sources corroborate the issue...

CVE-2025-6868 SourceCodester Simple Company Website manage.php sql injection

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/clients/manage.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-6867

CVE-2025-6867 affects SourceCodester Simple Company Website 1.0. The issue is a SQL injection in the file /admin/services/manage.php caused by manipulating the argument ID, reported as remotely exploitable with the exploit publicly disclosed. Multiple connected sources corroborate the vulnerabili...

CVE-2025-6867 SourceCodester Simple Company Website manage.php sql injection

A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/services/manage.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-12143

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection. This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...

CVE-2024-12150

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eron Software Wowwo CRM allows Blind SQL Injection. This issue affects Wowwo CRM. NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will ...

CVE-2024-11739

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...

CVE-2025-6863

The CVE-2025-6863 entry concerns PHPGurukul Local Services Search Engine Management System v2.1. Affected component: /admin/edit-category-detail.php. Root cause: unsanitized input in the editid parameter enables SQL injection. Impact: potential unauthorized data access/alteration and disruption (...

CVE-2025-6862

CVE-2025-6862 affects SourceCodester Best Salon Management System 1.0. The vulnerability is an SQL injection in the file /panel/edit_plan.php via the editid parameter, exploitable remotely. Public exploit appears to be disclosed. Multiple sources concur on a critical impact with potential for con...

CVE-2025-53306

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in lucidcrew WP Forum Server forum-server allows SQL Injection.This issue affects WP Forum Server: from n/a through = 1.8.2...

CVE-2025-53256

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YaySMTP yaysmtp allows SQL Injection.This issue affects YaySMTP: from n/a through = 2.6.6...

CVE-2025-53258

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through = 2.1.2...

CVE-2025-6859 SourceCodester Best Salon Management System pro_sale.php sql injection

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/prosale.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. T...

CVE-2025-6859 SourceCodester Best Salon Management System pro_sale.php sql injection

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/prosale.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. T...

CVE-2025-6850

The CVE-2025-6850 affects code-projects Simple Forum 1.0, specifically an SQL injection in the /forum1.php file via the File parameter. Multiple connected sources confirm remote exploitation possibilities and that the vulnerability originates from lack of input validation, enabling an attacker to...

CVE-2025-6847

CVE-2025-6847 affects code-projects Simple Forum 1.0. The SQL injection vulnerability is in /forum_edit.php via the iii parameter; exploitation is remote and has been disclosed in multiple feeds. Connected sources confirm the issue and describe it as critical in significance, with varying CVSS re...