CVE-2025-34038

A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIdssql, type method, reachable through the cmd=getSelectAllId workflow in the...

CVE-2025-5590

The Owl carousel responsive plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2021-41691

A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "studentid" and "TRANSFERSCHOOL" parameters in POST request sent to /TransferredOutModal.php...

CVE-2025-51671

A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file...

PT-2025-27011 · Opennms · Opennms Meridian +1

Name of the Vulnerable Software and Affected Versions: OpenNMS Meridian versions prior to 2024.2.6 OpenNMS Horizon versions prior to 33.16 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for...

CVE-2025-51671

A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file...

CVE-2025-51672

A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability exists in the manage-companies.php file and allows remote attackers to execute arbitrary SQL code via the companyname parameter in a POST request...

CVE-2025-51672

A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability exists in the manage-companies.php file and allows remote attackers to execute arbitrary SQL code via the companyname parameter in a POST request...

CVE-2025-51672

Summary: CVE-2025-51672 affects PHPGurukul Dairy Farm Shop Management System 1.3, in the file manage-companies.php . The vulnerability is a time-based blind SQL injection that allows remote attackers to execute arbitrary SQL via the companyname parameter in a POST request. The weakness originates...

CVE-2025-51671

The CVE-2025-51671 entry concerns PHPGurukul Dairy Farm Shop Management System 1.3, where a SQL injection vulnerability exists in manage-categories.php. The issue arises from insufficient validation of inputs for the POST parameters category and categorycode, allowing remote attackers to craft SQ...

CVE-2025-6665 code-projects Inventory Management System editBrand.php sql injection

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /phpaction/editBrand.php. The manipulation of the argument editBrandStatus leads to sql injection. The attack can be...

CVE-2025-6612

Code-projects Inventory Management System 1.0 contains a SQL injection vulnerability in the file /php_action/removeCategories.php triggered by manipulating the categoriesId parameter. The root cause is lack of input validation for externally supplied SQL statements. The issue is exploitable remot...

CVE-2024-27685

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables...

CVE-2025-6609

CVE-2025-6609 affects SourceCodester Best Salon Management System 1.0. The issue is a SQL injection in the /panel/bwdates-reports-details.php file caused by unsafely handling the fromdate/todate parameters. Publicly disclosed exploit and PoC exist; exploitation can be remote with low privileges a...

CVE-2025-6608 SourceCodester Best Salon Management System edit-services.php sql injection

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-services.php. The manipulation of the argument editid leads to sql injection. The attack can be launched...

CVE-2025-6605

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2025-6607

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/stock.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6607

The CVE-2025-6607 entry concerns SourceCodester Best Salon Management System 1.0. Affected is an unknown function in /panel/stock.php where manipulating the ID parameter triggers SQL injection. Exploitation is described as remote and the exploit/public disclosure is noted. Connected sources consi...

CVE-2025-6606

The CVE-2025-6606 entry concerns SourceCodester Best Salon Management System 1.0. Affected component: the file /panel/add-services.php, where manipulation of the argument Type enables SQL injection. Root cause: unsafe handling of the Type parameter allowing remote attacker input to influence SQL ...

CVE-2025-6605 SourceCodester Best Salon Management System edit-staff.php sql injection

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has bee...