CVE-2025-11530

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

PT-2025-41356

Name of the Vulnerable Software and Affected Versions code-projects Online Complaint Site version 1.0 Description A flaw exists in code-projects Online Complaint Site 1.0 that allows for remote SQL injection. The issue is located in the file /cms/admin/state.php and involves manipulation of the...

CVE-2025-11530: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

CVE-2025-40685

Reflected Cross-Site Scripting XSS in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searcstate' parameter in/state.php...

CVE-2025-40685: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searcstate' parameter in/state.php...

CVE-2025-5654 PHPGurukul Complaint Management System edit-state.php sql injection

A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-state.php. The manipulation of the argument description leads to sql injection. The attack may be launched remotely. The...

CVE-2025-5654: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-state.php. The manipulation of the argument description leads to sql injection. The attack may be launched remotely. The...

PT-2025-10023

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0 Description A critical issue has been found in the code-projects Blood Bank Management System. The vulnerability affects an unknown functionality of the file /admin/edit state.php. The...

PT-2025-7653

Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0 Description A critical vulnerability was found in the code-projects Real Estate Property Management System. The issue affects an unknown functionality of the file /ajax state.php...

CVE-2024-12977: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/state.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2022-43318

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php...

CVE-2022-43318

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php...

CVE-2022-43318: Improper Neutralization of Special Elements used in an SQL Command

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php...

CVE-2019-7352

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view 'state' aka Run State state.php does no input validation to the value supplied to the 'New State' aka newState field, allowing an attacker to execute HTML or JavaScript code...

PT-2019-18557

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Self-Stored Cross Site Scripting XSS issue exists due to the lack of input validation in the 'New State' field, allowing an attacker to execute HTML or JavaScript code. Recommendations For...

CVE-2019-7352: Improper Neutralization of Input During Web Page Generation

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view 'state' aka Run State state.php does no input validation to the value supplied to the 'New State' aka newState field, allowing an attacker to execute HTML or JavaScript code...

csr.gov.in XSS vulnerability

Open Bug Bounty ID: OBB-575364 Description| Value ---|--- Affected Website:| csr.gov.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-17640

Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter...

CVE-2017-17640

Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter...

CVE-2017-17640

The CVE-2017-17640 entry concerns Advanced World Database 2.0.5, which is vulnerable to SQL Injection via the city.php and state.php parameters (country and state inputs). Multiple connected sources (CNVD-2017-37430, NVD entries) describe a remote injection path that can affect database queries t...