CVE-2025-45542

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries...

CVE-2024-57459

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands...

PT-2025-23759 · Unknown · Phpgurukul Notice Board System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Notice Board System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /search-notice.php. The manipulation of the searchdata argument leads to SQL injection. This issue can be...

PT-2025-23834 · Unknown · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 1.3 Description: A critical issue was found in the PHPGurukul Student Result Management System. The problem affects the file /editmyexp.php and is related to the manipulation of the emp1ctc...

PT-2025-23739 · Unknown · Phpgurukul Teacher Subject Allocation Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teacher Subject Allocation Management System version 1.0 Description: A critical issue has been discovered in the unknown code of the file /admin/edit-course.php. The manipulation of the editid argument leads to SQL injection. This...

PT-2025-23740 · Unknown · Phpgurukul Teacher Subject Allocation Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teacher Subject Allocation Management System version 1.0 Description: A critical issue affects the processing of the file /admin/changeimage.php, where the manipulation of the editid argument leads to SQL injection. This issue may ...

PT-2025-23744 · Unknown · Phpgurukul Curfew E-Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Curfew e-Pass Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /admin/view-pass-detail.php. The manipulation of the viewid argument leads to SQL...

PT-2025-23758 · Unknown · Phpgurukul Curfew E-Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Curfew e-Pass Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/edit-category-detail.php, where the manipulation of the editid argument leads to SQL injection. This...

PT-2025-23738 · Unknown · Phpgurukul Teacher Subject Allocation Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teacher Subject Allocation Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /admin/edit-teacher-info.php. The manipulation of the editid argument leads to SQ...

PT-2025-23769 · Ideacms · Ideacms

Name of the Vulnerable Software and Affected Versions: IdeaCMS versions up to 1.7 Description: A critical issue affects the function Article/Goods of the file "/api/v1.index.article/getList.html". The manipulation of the Field argument leads to SQL injection. The attack may be initiated remotely...

PT-2025-23838 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Hospital Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /registration.php. The manipulation of the full name and username arguments leads to S...

PT-2025-23781 · Unknown · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical issue has been found in the PHPGurukul Dairy Farm Shop Management System, affecting the processing of the file /bwdate-report-details.php. The manipulation of th...

CVE-2025-46011

Listmonk v4.1.0 fixed in v5.0.0 is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges...

PT-2025-23862 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been found in the PHPGurukul Online Fire Reporting System, affecting the /reporting.php file. The manipulation of the fullname argument leads to SQL...

PT-2025-23774 · Unknown · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical vulnerability was found in the PHPGurukul Dairy Farm Shop Management System. This issue affects unknown code of the file /add-product.php. The manipulation of th...

PT-2025-23870 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue was found in the PHPGurukul Online Fire Reporting System. This issue affects the file /admin/edit-team.php and is related to the manipulation of the teamid...

GO-2025-3734 Navidrome allows SQL Injection via role parameter in github.com/navidrome/navidrome

Navidrome allows SQL Injection via role parameter in github.com/navidrome/navidrome...

CVE-2025-5103

CVE-2025-5103 affects the WordPress plugin Ultimate Gift Cards for WooCommerce. Many versions up to 3.1.4 are vulnerable to boolean-based SQL injection via the default_price and product_id parameters due to insufficient escaping and lack of prepared statements. Exploitation requires Administrator...

WordPress MyStyle Custom Product Designer plugin <= 3.21.1 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by astra.r3verii in WordPress Plugin MyStyle Custom Product Designer versions = 3.21.1...

SQL Injection

github.com/navidrome/navidrome is vulnerable to SQL injection. The vulnerability is due to improper input validation of the role parameter in the /api/artist API endpoint, allowing attackers to inject arbitrary SQL queries...