CVE-2025-40693: Improper Neutralization of Input During Web Page Generation

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs 'tname' parameter via GET and, 'teamleadname', 'teammember' and 'teamname' parameters via POST at the...

CVE-2025-40687: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'mobilenumber', 'teamleadname' and 'teammember' parameters in the endpoint '/ofrs/admin/add-team.php'...

CVE-2025-7584: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects some unknown processing of the file /admin/add-team.php. The manipulation of the argument teammember leads to sql injection. The attack may be initiated remotely. The exploit ha...

CVE-2025-5618 PHPGurukul Online Fire Reporting System edit-team.php sql injection

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. This vulnerability affects unknown code of the file /admin/edit-team.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-5618: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. This vulnerability affects unknown code of the file /admin/edit-team.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

PT-2022-20998

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the id variable in the "rdms/admin/teams/view team.php" API endpoint. Recommendations For Rescue Dispatch Management System...

PT-2022-20999

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue allows for SQL Injection via the "/rdms/admin/teams/manage team.php" API endpoint, specifically through the id variable. This could potentially lead to unauthorized access or...

CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

Cross site scripting

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23977: Improper Neutralization of Input During Web Page Generation

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973: Improper Neutralization of Special Elements used in an SQL Command

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

PT-2020-6754

Name of the Vulnerable Software and Affected Versions KandNconcepts Club CMS versions 1.1 through 1.2 Description The issue concerns a cross-site scripting problem via the id parameter in the team.php, player.php, and club.php scripts. This occurs due to inadequate protection of the webpage...

PT-2020-15608

Name of the Vulnerable Software and Affected Versions KandNconcepts Club CMS versions 1.1 through 1.2 Description The issue concerns SQL Injection, which can be exploited via the id parameter in the 'team.php', 'player.php', and 'club.php' files. Recommendations For versions 1.1 and 1.2, avoid...

npf.805stats.com XSS vulnerability

Open Bug Bounty ID: OBB-388793 Description| Value ---|--- Affected Website:| npf.805stats.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

thecityground.com XSS vulnerability

Vulnerable URL: http://www.thecityground.com/team.php?opponentparent=1"...

Oberliga - team.php team Parameter SQL Injection

The oberligatheme WordPress theme was affected by a team.php team Parameter SQL Injection security vulnerability...

J&W Communications SQL Injection

Title: J&W Communications Cms SQL Injection Vulnerability + Date: 2014-07-29 + Author: Hekt0r + Vendor Homepage: www.jw-com.com + Tested on: Windows7 & Kali Linux + Vulnerable Files: /rosters.php /team.php /scoresheet.php + Dork : intext:"designed by J&W Communications" inurl:/team.php.php?id=...

CVE-2012-5291

CVE-2012-5291 is a SQL injection vulnerability in the Posse Softball Director CMS, specifically in the file team.php. The underlying issue allows remote attackers to manipulate the idteam parameter to execute arbitrary SQL commands. This has public exploit code and references (e.g., Exploit-DB en...