EUVD-2025-26647

Malicious code in bioql PyPI...

CVE-2025-9932

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

CVE-2025-9932

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

CVE-2025-9932

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

PHPGurukul Beauty Parlour Management System SQL注入漏洞

PHPGurukul Beauty Parlour Management System is an application from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.1 of the PHPGurukul Beauty Parlour Management System, which stems from improper manipulation of the parameter lid in the file /admin/update-image.php, which could...

CVE-2025-9932

The CVE-2025-9932 entry affects PHPGurukul Beauty Parlour Management System version 1.1. The vulnerability concerns an issue in the file /admin/update-image.php where manipulation of the lid parameter enables SQL injection. The attack is stated as remote with a published exploit. Connected source...

CVE-2025-9932 PHPGurukul Beauty Parlour Management System update-image.php sql injection

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

CVE-2025-9932 PHPGurukul Beauty Parlour Management System update-image.php sql injection

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

PT-2025-35848

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A flaw exists in PHPGurukul Beauty Parlour Management System 1.1 within the file /admin/update-image.php. Manipulation of the lid argument can lead to SQL injection,...

MAL-2025-1191 Malicious code in update_image_asset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23a245eb7d761ba61f0ab7db2cc504abb690a09fb1fe2b995535390a48facab3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gha-update-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ebbdc2047d61c22672a9c4ccd50a29ebd7cc57bb3617aeb9ef883efa027d449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11484

A vulnerability classified as critical was found in Code4Berry Decoration Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /decoration/admin/updateimage.php of the component User Image Handler. The manipulation of the argument productimage1 leads to...

CVE-2024-9794

A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue affects some unknown processing of the file /update-image1.php. The manipulation of the argument productimage1 leads to unrestricted upload. The attack may be initiated remotely. T...

Codezips Online Shopping Portal 代码问题漏洞

Codezips Online Shopping Portal is a Codezips open source online store system. A code issue vulnerability exists in Codezips Online Shopping Portal version 1.0, which stems from the parameter productimage1 in /update-image1.php that can lead to unrestricted uploads...

CVE-2024-2268

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been classified as critical. Affected is an unknown function of the file /productupdate.php?update=1. The manipulation of the argument updateimage leads to unrestricted upload. It is possible to launch the attack...

Online-Book-Store-Website Code Issue Vulnerability

Online-Book-Store-Website is an online bookstore website. A code issue vulnerability exists in version 1.0 of Online-Book-Store-Website that stems from an unrestricted upload in the updateimage parameter of the /productupdate.php?update=1 file...

CVE-2023-27455

CVE-2023-27455 is an unauthenticated, reflected XSS in the WordPress plugin “Update Image Tag Alt Attribute” up to version 2.4.5. Public references confirm the vulnerability affects this plugin and versions ≤ 2.4.5, with a CVSS base score around 6.1 (NVD) and higher in PatchStack data. The issue ...

WordPress plugin Update Image Tag Alt Attribute 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Software Update Image Tag Alt Attribute Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27455 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ba6000222dd7 Credits...

WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Update Image Tag Alt Attribute Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 06d58607dd7f Credits István...