EUVD-2025-11493

Malicious code in bioql PyPI...

CVE-2025-11064: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Impacted is an unknown function of the file /admin/teachers.php. The manipulation of the argument department results in sql injection. It is possible to launch the attack remotely. The exploit has been release...

CVE-2024-50834

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...

CVE-2025-28072

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php...

CVE-2025-28072

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php...

PHPGurukul Pre-School Enrollment System 安全漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. A security vulnerability exists in the PHPGurukul Pre-School Enrollment System that stems from manage-teachers.php not properly filtering user input paths, which could lead to a directory...

CVE-2025-28072: Improper Limitation of a Pathname to a Restricted Directory

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php...

CVE-2024-50836: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters...

CVE-2024-50834: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...

CVE-2024-48744

A Reflected Cross Site Scripting XSS vulnerability was found in /trms/listed- teachers.php in PHPGurukul Teachers Record Management System v2.1, which allows remote attackers to execute arbitrary code via "searchinput" POST request parameter...