News Portal Project add-subcategory.php file SQL injection vulnerability

News Portal Project is a news portal project developed by PHPGurukul. There is an SQL injection vulnerability in News Portal Project. This vulnerability arises from the failure of the/admin/add-subcategory.php file to properly handle the sucatdescription parameter. Currently, no detailed details...

CVE-2026-5839: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument sucatdescription leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

CVE-2024-44658: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php...

CVE-2025-63622

A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/admin/subcategory.php. This manipulation of the argument category causes SQL injection...

CVE-2025-63622

A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/admin/subcategory.php. This manipulation of the argument category causes SQL injection...

CVE-2025-63622: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/admin/subcategory.php. This manipulation of the argument category causes SQL injection...

EUVD-2025-28441

Malicious code in bioql PyPI...

CVE-2025-57150: Improper Neutralization of Input During Web Page Generation

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting XSS in admin/subcategory.php via the categoryName parameter...

CVE-2025-5251: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-5078: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/subcategory.php. Performing manipulation of the argument Category results in sql injection. The attack is possible to be carried out remotely. The exploit is now...

CVE-2025-5077: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2025-5059: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. It is possible to initiate...

CVE-2025-1871

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php...

CVE-2025-1871: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php...

PT-2025-9320

Name of the Vulnerable Software and Affected Versions 101news versions 1.0 Description A SQL injection issue has been found, affecting the "category" and subcategory parameters in the admin/add-subcategory.php file. Recommendations For version 1.0, avoid using the category and subcategory...

Complaint Management System subcategory.php File SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability, which stems from an incorrect manipulation of the parameter category in the file /admin/subcategory.php that can lead to sql injection. No details of the...

CVE-2024-12230

CVE-2024-12230 affects PHPGurukul Complaint Management System 1.0. The vulnerability is a SQL injection in the file /admin/subcategory.php, caused by improper manipulation of the category parameter. The issue is exploitable remotely and an exploit has been disclosed publicly. Multiple connected s...

CVE-2024-12230: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/subcategory.php. The manipulation of the argument category leads to sql injection. The attack may be launched...

PT-2024-17497

Name of the Vulnerable Software and Affected Versions PHPGurukul Complaint Management System version 1.0 Description A critical issue has been found in the PHPGurukul Complaint Management System, affecting some unknown functionality of the file /admin/subcategory.php. The manipulation of the...

AFFCommerce Shopping Cart 1.1.4 SubCategory.php cl Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query...