PT-2025-23880 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue was found in the Patient Record Management System. The problem is related to the manipulation of the itr no argument in the /sputum form.php file, which...

PT-2025-23885 · Unknown · Code-Projects/Anirbandutta9 Content Management System +1

Name of the Vulnerable Software and Affected Versions: code-projects/anirbandutta9 Content Management System and News-Buzz version 1.0 Description: A critical issue was found in the Content Management System and News-Buzz. The problem affects an unknown function of the file /publicposts.php...

PT-2025-23976 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue has been identified in the system, affecting an unknown functionality of the file /bwdates-report-result.php. The manipulation of the fromdat...

PT-2025-23921 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical issue affects the processing of the file /admin/manage-users.php, where the manipulation of the uid argument leads to SQL injection. The attack can be initiated...

PT-2025-23978 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue has been discovered, affecting some unknown functionality of the file /search-report-result.php. The manipulation of the serachdata argument...

CVE-2025-5618 PHPGurukul Online Fire Reporting System edit-team.php sql injection

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. This vulnerability affects unknown code of the file /admin/edit-team.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-5618

CVE-2025-5618 concerns PHPGurukul Online Fire Reporting System 1.2. Multiple connected sources confirm a SQL injection vulnerability in the /admin/edit-team.php script, triggered by manipulating the teamid parameter. Root cause: lack of input validation leading to SQL command manipulation. Impact...

CVE-2025-5613 PHPGurukul Online Fire Reporting System request-details.php sql injection

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects some unknown processing of the file /request-details.php. The manipulation of the argument requestid leads to sql injection. The attack may be initiated remotely. The exploit ha...

CVE-2025-46011

Listmonk v4.1.0 fixed in v5.0.0 is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges...

CVE-2025-5604

CVE-2025-5604 affects Campcodes Hospital Management System 1.0. The vulnerability is a SQL injection in the file /user-login.php triggered by manipulating the Username parameter. It is exploitable remotely over a network, with exploitation information publicly disclosed in the provided documents....

CVE-2025-5603 Campcodes Hospital Management System registration.php sql injection

A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument fullname/username leads to sql injection. The attack can be launched...

CVE-2025-5602 Campcodes Hospital Management System registration.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Hospital Management System 1.0. Affected is an unknown function of the file /admin/registration.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-5580 CodeAstro Real Estate Management System login.php sql injection

A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-5579

CVE-2025-5579 affects PHPGurukul Dairy Farm Shop Management System 1.3. the vulnerability is in the /search-product.php file, where manipulating the productname parameter leads to an SQL injection. Descriptions across multiple sources confirm remote exploitation possibilities and public disclosur...

CVE-2025-5577 PHPGurukul Dairy Farm Shop Management System profile.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2025-5576 PHPGurukul Dairy Farm Shop Management System bwdate-report-details.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This issue affects some unknown processing of the file /bwdate-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be...

CVE-2025-4578 File Provider <= 1.2.3 - Unauthenticated SQLi

The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-5566

CVE-2025-5566 pertains to PHPGurukul Notice Board System 1.0, where the argument searchdata in the file /search-notice.php can be manipulated to trigger an SQL injection. The vulnerability is exploitable remotely and has been publicly disclosed. The available sources describe an(SQL) injection vu...

CVE-2025-5561

CVE-2025-5561 affects PHPGurukul Curfew e-Pass Management System 1.0. The vulnerability is an SQL injection in the file /admin/view-pass-detail.php, exploitable by manipulating the viewid parameter. It is described as remote and was publicly disclosed. Multiple connected sources corroborate a cri...

CVE-2025-5553 PHPGurukul Rail Pass Management System download-pass.php sql injection

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...