34 matches found
EUVD-2021-28690
Malicious code in bioql PyPI...
EUVD-2024-51235
Malicious code in bioql PyPI...
CVE-2025-7137: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/schedule-staff.php. The manipulation of the argument staffid leads to sql injection. It is possible to initiate the attack remotely. Th...
CVE-2025-7140: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-staff.php of the component Update Staff Page. The manipulation of the argument Staff Name leads to cross site scripting. It is...
CVE-2025-6604: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...
CVE-2022-33880
hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter...
CVE-2025-22923
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile...
CVE-2024-12976
A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2024-12976 CodeZips Hospital Management System staff.php sql injection
A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2024-12976
CVE-2024-12976 affects CodeZips Hospital Management System 1.0. Affected component: /staff.php where manipulation of the tel parameter enables SQL injection. The vulnerability is exploitable remotely and the exploit has been disclosed publicly. Several sources rate the issue as critical, with CVS...
CVE-2024-12976: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...
PT-2024-35810
Name of the Vulnerable Software and Affected Versions Kashipara College Management System version 1.0 Description A problematic issue has been discovered, affecting some unknown functionality of the file submit enroll staff.php. The manipulation of the class name argument leads to cross-site...
Demanzo Matrimony 1.5 Cross Site Request Forgery
==================================================================================================================================== | Title : Demanzo Matrimony v.1.5 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 109.0.132-bit | |...
Sql injection
hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter...
CVE-2022-33880
Projectworlds Hospital Management System Mini-Project contains an SQL injection in hms-staff.php via the type parameter, affecting versions prior to 2018-06-17. The root cause is unsafely constructed SQL in that file, enabling data disclosure or unauthorized access as described in related advisor...
CVE-2022-33880: Improper Neutralization of Special Elements used in an SQL Command
hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter...
Projectworlds Hospital Management System SQL Injection Vulnerability
Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. SQL injection vulnerability exists in Projectworlds Hospital Management System version 1.0, which can be exploited by attackers via the "hms -staff.php" in "email parameter" to perform SQL...
CVE-2021-43628
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...
