EUVD-2025-11493

Malicious code in bioql PyPI...

CVE-2025-11064: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Impacted is an unknown function of the file /admin/teachers.php. The manipulation of the argument department results in sql injection. It is possible to launch the attack remotely. The exploit has been release...

CVE-2024-50834

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...

CVE-2025-28072

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php...

PHPGurukul Pre-School Enrollment System 安全漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. A security vulnerability exists in the PHPGurukul Pre-School Enrollment System that stems from manage-teachers.php not properly filtering user input paths, which could lead to a directory...

CVE-2025-28072

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php...

PT-2025-16896

Name of the Vulnerable Software and Affected Versions PHPGurukul Pre-School Enrollment System affected versions not specified Description The PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in the manage-teachers.php file. This issue allows for potential unauthorized...

CVE-2025-28072: Improper Limitation of a Pathname to a Restricted Directory

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php...

CVE-2024-50836: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters...

CVE-2024-50834: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...

CVE-2024-48744

A Reflected Cross Site Scripting XSS vulnerability was found in /trms/listed- teachers.php in PHPGurukul Teachers Record Management System v2.1, which allows remote attackers to execute arbitrary code via "searchinput" POST request parameter...

PT-2024-33198

Name of the Vulnerable Software and Affected Versions PHPGurukul Teachers Record Management System version 2.1 Description A Reflected Cross Site Scripting XSS issue was found in the /trms/listed-teachers.php endpoint, allowing remote attackers to execute arbitrary code via the searchinput POST...