16801 matches found
CVE-2023-41527
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...
PT-2025-32292 · Unknown · Attendance Management System
Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to a SQL injection issue through the username parameter located at the /index.php API endpoint. Recommendations: As a temporar...
CVE-2023-41530
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...
CVE-2023-41524
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...
PT-2025-32288 · Unknown · Attendance Management System
Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createClassArms.php file. These flaws are present through the classId and...
CVE-2023-41521
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...
CVE-2023-41526
The Hospital Management System v4 , developed by Kishan Lal, is vulnerable to multiple SQL injection flaws in the func1.php file. The root cause is the incorrect manipulation and lack of proper sanitization for the username3 and password3 parameters. These vulnerabilities could allow an attacker ...
CVE-2023-41523
The Student Attendance Management System v1 is susceptible to a SQL injection vulnerability. The root cause is the incorrect manipulation of the emailAddress parameter within the createClassTeacher.php file. Exploitation of this flaw could allow unauthorized database interaction. To mitigate this...
CVE-2023-41527
Hospital Management System v4 , developed by Kishan Lal, contains a SQL injection vulnerability. The flaw exists in the func.php file due to the incorrect manipulation of the password2 parameter, which allows for potential unauthorized database access or modification. Remediation involves sanitiz...
CVE-2023-41525
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...
PT-2025-32318 · Wanzhou · Woes Intelligent Optimization Energy Saving System
Name of the Vulnerable Software and Affected Versions: Wanzhou WOES Intelligent Optimization Energy Saving System version 1.0 Description: A vulnerability exists in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. The issue involves SQL injection due to the manipulation of the...
CVE-2023-41525
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...
CVE-2023-41527
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...
PT-2025-32301 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection due to the doctor contact parameter in the doctorsearch.php file. Recommendations: As a temporary workaround, consider...
CVE-2023-41520
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...
PT-2025-32291 · Unknown · Attendance Management System
Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to a SQL injection issue through the emailAddress parameter at the createClassTeacher.php endpoint. Recommendations: As a...
CVE-2023-41532
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...
PT-2025-32294 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: A SQL injection vulnerability exists in the Patient Search Module of the Hospital Management System. The vulnerability is located in the patient contact parameter of the patientsearch.php file...