Lucene search
K

27 matches found

NVD
NVD
added 2026/02/08 6:16 a.m.2 views

CVE-2026-2136

A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be use...

9.8CVSS0.00045EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/11/10 12:0 a.m.4 views

PT-2025-45597

A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...

6.5CVSS7.2AI score0.00027EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-4695

Malware in sbrugna...

6.5CVSS6.4AI score0.00271EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-4539

Malware in sbrugna...

6.1CVSS6.3AI score0.00266EPSS
Exploits1References2
CNVD
CNVD
added 2025/09/23 12:0 a.m.3 views

Small CRM /create-ticket.php File SQL Injection Vulnerability

Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability, which originates from the lack of validation of externally-entered SQL statements in the parameter subject in the file /create-ticket.php. An attacker can exploit this vulnerability to...

9.8CVSS7.9AI score0.00046EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/09/18 12:2 p.m.3 views

CVE-2025-10664 PHPGurukul Small CRM create-ticket.php sql injection

A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...

7.5CVSS7.3AI score0.00046EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/07/08 2:32 a.m.2 views

CVE-2025-7158 PHPGurukul Zoo Management System manage-normal-ticket.php sql injection

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/manage-normal-ticket.php. The manipulation of the argument ID leads to sql injection. The attack can be launched...

6.5CVSS7.6AI score0.00268EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/06/30 9:2 p.m.2 views

CVE-2025-6929 PHPGurukul Zoo Management System view-normal-ticket.php sql injection

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects some unknown processing of the file /admin/view-normal-ticket.php. The manipulation of the argument viewid leads to sql injection. The attack may be initiated remotely. The exploit...

6.5CVSS7.6AI score0.00268EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/16 11:0 a.m.10 views

CVE-2025-4770 PHPGurukul Park Ticketing Management System view-normal-ticket.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0. This issue affects some unknown processing of the file /view-normal-ticket.php. The manipulation of the argument viewid leads to sql injection. The attack may be initiated remotel...

6.5CVSS0.00197EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.1 views

PHPGurukul Park Ticketing Management System 注入漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter viewid in the file /view-foreigner-ticket.php. An...

8.8CVSS8.1AI score0.00197EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.2 views

PHPGurukul Park Ticketing Management System 注入漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter viewid in the file /view-normal-ticket.php. An...

8.8CVSS8.2AI score0.00197EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/04/30 12:0 a.m.7 views

CVE-2025-45017

A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the tprice POST request parameter...

0.01918EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/09/04 5:0 p.m.16 views

CVE-2024-8415 SourceCodester Food Ordering Management System add-ticket.php sql injection

A vulnerability was found in SourceCodester Food Ordering Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /routers/add-ticket.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. Th...

6.5CVSS7.6AI score0.00181EPSS
Exploits1References5
NVD
NVD
added 2024/02/28 10:15 p.m.12 views

CVE-2024-25350

SQL Injection vulnerability in /zms/admin/edit-ticket.php in PHPGurukul Zoo Management System 1.0 via tickettype and tprice parameters...

9.8CVSS7.8AI score0.00111EPSS
Exploits1References1
Prion
Prion
added 2024/02/28 10:15 p.m.11 views

Sql injection

SQL Injection vulnerability in /zms/admin/edit-ticket.php in PHPGurukul Zoo Management System 1.0 via tickettype and tprice parameters...

8.6AI score0.00111EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/02/28 12:0 a.m.7 views

CVE-2024-25350

SQL Injection vulnerability in /zms/admin/edit-ticket.php in PHPGurukul Zoo Management System 1.0 via tickettype and tprice parameters...

8.2AI score0.00111EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/05/26 5:5 p.m.4 views

CVE-2021-4232 Zoo Management System manage-ticket.php cross site scripting

A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input alert1 leads to cross site scripting. It is possible to launch the attack remotely...

3.5CVSS6.2AI score0.00218EPSS
Exploits0References1
Prion
Prion
added 2020/09/30 6:15 p.m.11 views

Sql injection

Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria function in the protected/models/Ticket.php file. By modifying the folder GET parameter, it is possible to execute arbitrary SQL statements via a crafted URL. Unauthenticated remote command execution i...

7.5CVSS10AI score0.03147EPSS
Exploits1References2
NVD
NVD
added 2020/03/12 2:15 p.m.10 views

CVE-2020-10438

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/reply-ticket.php by adding a question mark ? followed by the payload...

4.8CVSS5AI score0.00321EPSS
Exploits1References2
Prion
Prion
added 2020/03/12 2:15 p.m.10 views

Cross site scripting

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/reply-ticket.php by adding a question mark ? followed by the payload...

3.5CVSS4.9AI score0.00321EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder