16802 matches found
CVE-2025-6321
CVE-2025-6321 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability is an SQL injection in /admin/add-subadmin.php via the sadminusername parameter. It can be exploited remotely and the exploit has been disclosed publicly. Documented impact is data confidentiality/integrity/avail...
CVE-2025-6318
A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. This vulnerability affects unknown code of the file /admin/checkavailability.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit ha...
CVE-2025-6319 PHPGurukul Pre-School Enrollment System add-teacher.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. This issue affects some unknown processing of the file /admin/add-teacher.php. The manipulation of the argument tsubject leads to sql injection. The attack may be initiated remotely...
CVE-2025-6311 Campcodes Sales and Inventory System account_add.php sql injection
A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/accountadd.php. The manipulation of the argument id/amount leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2025-6311
CVE-2025-6311 affects Campcodes Sales and Inventory System 1.0, with vulnerability located in the file /pages/account_add.php. The issue arises from manipulation of the id/amount parameter, enabling SQL injection that can be exploited remotely and has been disclosed publicly. Multiple sources con...
CVE-2025-6305
CVE-2025-6305 affects code-projects Online Shoe Store 1.0. The vulnerability is an SQL injection in the admin feature file /admin/admin_feature.php, triggered by manipulating the product_code parameter. Root cause: lack of input validation in that parameter. Exploitation potential: remote and pub...
CVE-2025-6304
The CVE-2025-6304 entry concerns code-projects Online Shoe Store 1.0, where the file /cart.php contains a vulnerable parameter qty[] that enables SQL injection. Multiple connected sources (CNVD/CNNVD/NVD etc.) confirm this SQL injection vector can be exploited remotely and that the exploit has be...
CVE-2025-6300
CVE-2025-6300 affects PHPGurukul Employee Record Management System 1.3, with a SQL injection in /admin/editempeducation.php caused by unsafely handling the yopgra parameter. Multiple connected sources (CNVD/CNNVD/Red Hat/RH, PT-Security, etc.) confirm remote exploitation potential and public disc...
PT-2025-26288 · Unknown · Phpgurukul Pre-School Enrollment System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Pre-School Enrollment System. This issue affects unknown code of the file /admin/check availability.php. The manipulation of...
PT-2025-26280 · Unknown · Campcodes Sales/Inventory System
Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /pages/account add.php. The manipulation of the id/amount argument leads to SQL injection. It is...
PT-2025-26469 · Unknown · Simple Pizza Ordering System
Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue has been found in the Simple Pizza Ordering System. The problem affects an unknown functionality of the file /adduser-exec.php. The manipulation of the...
PT-2025-26428 · Sourcecodester · Sourcecodester Advance Charity Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Advance Charity Management System version 1.0 Description: A critical issue was found in the SourceCodester Advance Charity Management System, affecting an unknown part of the file /members/fundDetails.php. The manipulation of...
PT-2025-26283 · Unknown · Campcodes Sales/Inventory System
Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue affects the processing of the file /pages/cat add.php, where the manipulation of the Category argument leads to SQL injection. The attack can be initiated remotely...
PT-2025-26261 · Code Projects · Code-Projects Hospital Management System
Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical issue has been discovered in the system, affecting an unknown function of the /contact.php file. The manipulation of the hostel name argument leads to SQL injection...
CVE-2025-46179
A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0. The squeryx parameter accepts unsanitized input, which is passed directly into backend SQL queries...
PT-2025-26466 · Unknown · Simple Pizza Ordering System
Name of the Vulnerable Software and Affected Versions: Simple Pizza Ordering System version 1.0 Description: A critical issue was found in the Simple Pizza Ordering System. The manipulation of the userid argument in the file /adds.php leads to SQL injection. This issue can be initiated remotely...
PT-2025-26318 · Unknown · Code-Projects Online Shoe Store
Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue was found in the code-projects Online Shoe Store. The problem affects an unknown function of the file /admin/admin product.php. The manipulation of the pid argument lea...
PT-2025-26284 · Unknown · Campcodes Sales/Inventory System
Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /pages/cat update.php. The manipulation of the ID argument leads to SQL injection. It is possibl...
PT-2025-26278 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal
Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical issue has been found in the PHPGurukul Emergency Ambulance Hiring Portal, affecting an unknown functionality of the file /index.php. The manipulation of the...
PT-2025-26273 · Unknown · Code-Projects Online Shoe Store
Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the /admin/admin feature.php file. The manipulation of the product code argument leads to SQL injection. It is possibl...