School-Management-System 安全漏洞

School-Management-System is a school management system developed by Lahiru Danushka. Version 1.0 of School-Management-System has security vulnerabilities, which stem from improper handling of email POST parameters in the file /studentms/admin/contact-us.php. This could lead to reflection-type...

CVE-2026-5805

A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contactus.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available...

CVE-2025-15073 itsourcecode Online Frozen Foods Ordering System contact_us.php sql injection

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...

PT-2025-53382

Name of the Vulnerable Software and Affected Versions itsourcecode Online Frozen Foods Ordering System version 1.0 Description A SQL injection issue exists in itsourcecode Online Frozen Foods Ordering System version 1.0. The issue is located in the /contact us.php file. Manipulation of the Name...

Arbitrary File Deletion Vulnerability in simcms us***.php File

simcms is a solution for used car website based on PHP+MYSQL. The simcms us.php file has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

SQL Injection Vulnerability in LLJCMS us***.php File

LJCMS is a PHP+MYSQL+Smarty based, free and open source enterprise website system. LLJCMS us.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in us***.php of Easy B2C Mall System v1.1

Easy B2C mall system is a mall system based on open source framework development. Easy B2C Mall System V1.1 version us.php SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Cloud CMS Backend us***.php File

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the us.php file in the background of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in the us***.cl***.php file of Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system us.cl.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...