CVE-2025-1952

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/password-recovery.php. The manipulation of the argument username/mobileno leads to sql injection. It is possible to launch the attack...

CVE-2025-1901

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/checkavailability.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...

PHPGurukul Human Metapneumovirus Testing Management System 注入漏洞

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. Human Metapneumovirus Testing Management System is vulnerable to a SQL injection vulnerability that affects the username parameter in the /login.php file. No details of the vulnerability are...

PHPGurukul Restaurant Table Booking System 安全漏洞

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter username/mobileno in the...

CVE-2025-1952: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/password-recovery.php. The manipulation of the argument username/mobileno leads to sql injection. It is possible to launch the attack...

CVE-2025-1954: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument username leads to sql injection. The attack can be...

PT-2025-9707

Name of the Vulnerable Software and Affected Versions PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description A critical issue has been found in the PHPGurukul Human Metapneumovirus Testing Management System. The problem affects an unknown functionality of the file...

CVE-2025-1955: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site...

CVE-2025-1901: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/checkavailability.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...

PHPGurukul Restaurant Table Booking System 安全漏洞

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from an incorrect operation of the parameter username in the /admin/checkavailability.php file, which can lead to SQL injection. An...

PT-2025-9708

Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A issue was found in the system, affecting some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the username argument...

Code-Projects Online Class and Exam Scheduling System 代码注入漏洞

Code-Projects Online Class and Exam Scheduling System is a Code-Projects open source online class and exam scheduling system. A code injection vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which stems from an incorrect manipulation of the parameter...

PT-2025-9697

Name of the Vulnerable Software and Affected Versions PHPGurukul Restaurant Table Booking System version 1.0 Description A critical issue was found in the PHPGurukul Restaurant Table Booking System. The problem is related to an unknown function of the file /admin/password-recovery.php, where the...

PT-2025-9593

Name of the Vulnerable Software and Affected Versions PHPGurukul Restaurant Table Booking System version 1.0 Description A critical issue has been found, affecting an unknown part of the file /admin/check availability.php. The manipulation of the username argument leads to SQL injection. This iss...

GO-2025-3468 Authelia applies regulation separately to Username-based logins to Email-based logins in github.com/authelia/authelia

Authelia applies regulation separately to Username-based logins to Email-based logins in github.com/authelia/authelia...

GO-2025-3484 Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome

Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome...

PYSEC-2025-15

Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. This vulnerability is fixed in 4.5.3...

PYSEC-2025-15

Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. This vulnerability is fixed in 4.5.3...

CVE-2025-24023

Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. This vulnerability is fixed in 4.5.3...

GHSA-P8Q5-CVWX-WVWP Flask-AppBuilder Observable Response Discrepancy

Impact User enumeration in database authentication in Flask-AppBuilder = 3.0.0. Allows for a non authenticated user to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. Patches Upgrade to flask-appbuilder=4.5.3 Workarounds Downgrade...