90 matches found
CVE-2025-61247
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php...
CVE-2025-61247: Improper Neutralization of Special Elements used in an SQL Command
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php...
EUVD-2020-18096
Malware in sbrugna...
EUVD-2024-38437
Malicious code in bioql PyPI...
PT-2025-26294 · Unknown · Phpgurukul Pre-School Enrollment System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System version 1.0 Description: A critical issue was found in the PHPGurukul Pre-School Enrollment System, affecting an unknown part of the file /enrollment.php. The manipulation of the fathername argument lea...
CVE-2024-25868
A Cross Site Scripting XSS vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via the membershipType parameter in the addtype.php component...
CVE-2023-36118
Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the page parameter...
CVE-2023-30106
Sourcecodester Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting XSS via page=about...
CVE-2022-43146
An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2025-29015
Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting XSS via the name parameter in /admin/pagesaccount.php...
CodeZips-Hospital-Management-System
Vulnerability Title + SQL Injection in Hospital Management...
PT-2024-36530 · Unknown · 1000Projects Bookstore Management System Php Mysql Project
Name of the Vulnerable Software and Affected Versions: 1000projects Bookstore Management System PHP MySQL Project version 1.0 Description: A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project. This issue affects some unknown functionality of the "add...
CVE-2024-55496: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects some unknown functionality of addcompany.php. Actions on the delete parameter result in SQL injection...
CVE-2024-48813: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute arbitrary code via the adminid parameter of the /update-employee.php component...
CVE-2021-43157: Improper Neutralization of Special Elements used in an SQL Command
Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cartremove.php...
PT-2021-23755
Name of the Vulnerable Software and Affected Versions Projectsworlds Online Shopping System PHP version 1.0 Description The issue concerns SQL injection via the id parameter in the "cart remove.php" file. This allows for potential manipulation of database queries. Recommendations For Projectsworl...
PT-2021-23756
Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Shopping System PHP version 1.0 Description A CSRF issue in the cart remove.php file allows a remote attacker to remove any product from a customer's cart. Recommendations For ProjectWorlds Online Shopping System PHP versi...
CVE-2020-25409: Improper Neutralization of Special Elements used in an SQL Command
Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters...
PT-2021-11136
Name of the Vulnerable Software and Affected Versions: ProjectWorlds College Management System Php version 1.0 Description: A Cross-Site Request Forgery CSRF issue exists, allowing a remote attacker to modify, delete, or create new entries for student, faculty, teacher, subject, scores, location,...
