CVE-2025-51656

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSLink.php...

CVE-2025-51660

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSProducts.php...

CVE-2025-51659

SemCms v5.0 is affected by a SQL injection vulnerability via the ID parameter in SEMCMS_Products.php. The CVE entry documents a low-severity issue (CVSS v3.1: 5.4, Confidentiality/Integrity impact L) that could enable unauthorized data access or modification, with no availability impact reported....

PT-2025-29492 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection issue via the pid parameter at the SEMCMS Categories.php file. Recommendations: As a temporary workaround, consider restricting access to the SEMCMS Categories.php fi...

PT-2025-29449 · Code Projects · Job Diary

Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A critical issue exists in code-projects Job Diary 1.0. The manipulation of the ID argument in the /view-emp.php file leads to a SQL injection. The attack can be initiated remotely, and the...

PT-2025-29495 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection vulnerability. The vulnerability is located in the pid parameter at the SEMCMS Quanxian.php file. Recommendations: As a mitigation, restrict access to the SEMCMS...

PT-2025-29455 · Phpgurukul · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical vulnerability exists in PHPGurukul Dairy Farm Shop Management System version 1.3 due to a SQL injection issue in the /invoice.php file. The del argument can be...

PT-2025-29409 · Phpgurukul · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue exists in PHPGurukul Online Fire Reporting System 1.2. The teamid parameter in the /admin/new-requests.php file is susceptible to SQL injection due to improper...

CVE-2025-51657

SemCms v5.0 is affected by a SQL injection vulnerability in the lgid parameter of SEMCMS_Link.php. Root cause: unsanitized input leads to potential data disclosure/integrity impact (C/L I/L A:N). Exploitation status not described in provided documents; no in-wild exploit details are given. Releva...

CVE-2025-51657

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSLink.php...

CVE-2025-51658

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSInquiryView.php...

CVE-2025-51654

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSInfocategories.php...

PT-2025-29442 · Phpgurukul · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical issue exists in PHPGurukul Dairy Farm Shop Management System 1.3, specifically within the edit-company.php file. Manipulation of the companyname argument results...

CVE-2025-51653

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSct.php...

CVE-2025-51654

SemCms v5.0 is vulnerable to SQL injection via the pid parameter in SEMCMS_Infocategories.php. Root cause: unsafely concatenated pid in SQL queries. Impact: potential data exposure or manipulation with at least low confidentiality/integrity risk per CVSS, no availability impact. Exploitation stat...

CVE-2025-7542 PHPGurukul User Registration & Login and User Management System user-profile.php sql injection

A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/user-profile.php. The manipulation of the argument uid leads to sql injection. The attack may be...

CVE-2025-7541

CVE-2025-7541 affects code-projects Online Appointment Booking System 1.0. The vulnerability is a SQL injection in the /get_town.php endpoint caused by unsanitized countryid parameter, enabling remote exploitation and potentially exposing sensitive data. Exploit appears to be publicly disclosed. ...

CVE-2025-7535

CVE-2025-7535 affects Campcodes Sales and Inventory System 1.0. The vulnerability is in an unknown function of /pages/reprint_cash.php where manipulation of the sid parameter enables SQL injection. Exploitation is possible remotely and public disclosure has occurred. Connected sources confirm the...

CVE-2025-7534

CVE-2025-7534 affects PHPGurukul Student Result Management System 2.0, specifically the GET Parameter Handler in /notice-details.php where the nid parameter is not properly sanitized, allowing SQL injection. The vulnerability enables remote exploitation and has had exploits disclosed publicly. Mu...

CVE-2025-7522 PHPGurukul Vehicle Parking Management System bwdates-reports-details.php sql injection

A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The...