CampCodes Sales and Inventory System SQL Injection Vulnerability

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. CampCodes Sales and Inventory System suffers from a SQL injection vulnerability that stems from the improper handling of the cid parameter in the file /pages/payment.php, no details of the vulnerability are...

PT-2025-22964 · Phpgurukul · Phpgurukul Company Visitor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Company Visitor Management System. This issue affects unknown code in the file /forgot-password.php. The manipulation o...

PT-2025-23004 · Campcodes · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue was discovered, affecting the file /hms/admin/query-details.php. The manipulation of the adminremark argument leads to SQL injection. This issue can be...

CVE-2025-5212 PHPGurukul Employee Record Management System editempexp.php sql injection

A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been classified as critical. Affected is an unknown function of the file /admin/editempexp.php. The manipulation of the argument emp1name leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-5207 SourceCodester Client Database Management System superadmin_update_profile.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

CVE-2025-40665

CVE-2025-40665 describes a time-based blind SQL injection in TCMAN’s GIM v11. The vulnerability stems from the ArbolID parameter in the /GIMWeb/PC/frmCorrectivosList.aspx endpoint, enabling an attacker to retrieve, create, update or delete databases. Multiple connected sources confirm the affecte...

CVE-2025-40671

SQL injection vulnerability in AES Multimedia's Gestnet v1.07. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘fkremotocentral’ parameter on the ‘/webservices/articles.php’ endpoint...

CVE-2025-5172

CVE-2025-5172 affects Econtrata up to 20250516. The vulnerability resides in an unknown function within /valida, where manipulating the usuario parameter yields SQL injection. Exploitation is described as remote and publicly disclosed, with vendor non-response noted. Connected sources corroborate...

PT-2025-22918 · Realce Tecnologia · Queue Ticket Kiosk

Name of the Vulnerable Software and Affected Versions: Realce Tecnologia Queue Ticket Kiosk versions up to 20250517 Description: A critical vulnerability affects the unknown code of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to SQL...

PT-2025-22939 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue has been found in the PHPGurukul Employee Record Management System. This issue affects the file /loginerms.php and is related to SQL injection. The...

Fedora: Security Advisory (FEDORA-2025-4dfc188932)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Divine Vision Han Technology Co.

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

PT-2025-22898

Name of the Vulnerable Software and Affected Versions TCMAN's GIM version 11 Description The issue concerns time-based blind SQL injection vulnerabilities. These vulnerabilities allow an attacker to retrieve, create, update, and delete databases through the ArbolID parameter in the...

CVE-2025-47599

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in facturante Facturante facturante allows SQL Injection.This issue affects Facturante: from n/a through = 1.11...

CVE-2025-47478

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows SQL Injection.This issue affects ProfileGrid : from n/a through = 5.9.5.0...

CVE-2025-41377

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-46455

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in IndigoThemes WP HRM LITE wp-hrm-lite-human-resource-management-system allows SQL Injection.This issue affects WP HRM LITE: from n/a through = 1.1...

CVE-2025-46460

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Detheme Easy Guide wp-easy-guide allows SQL Injection.This issue affects Easy Guide: from n/a through = 1.0.0...

CVE-2025-46463

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows SQL Injection.This issue affects Mailing Group Listserv: from n/a through = 3.0.4...

CVE-2025-46539

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFable Fable Extra fable-extra allows Blind SQL Injection.This issue affects Fable Extra: from n/a through = 1.0.6...