EUVD-2019-18965

Malware in sbrugna...

EUVD-2019-8380

Malware in sbrugna...

EUVD-2014-9723

Malware in sbrugna...

EUVD-2009-4900

Malware in sbrugna...

EUVD-2005-3912

Malware in sbrugna...

EUVD-2022-32446

Malicious code in bioql PyPI...

EUVD-2025-6948

Malicious code in bioql PyPI...

EUVD-2024-1982

Malicious code in bioql PyPI...

EUVD-2024-16270

Malicious code in bioql PyPI...

EUVD-2022-37573

Malicious code in bioql PyPI...

CVE-2025-11135

A vulnerability was detected in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The affected element is the function loadLanguage of the file classes/class.database.php of the component Cookie Handler. Performing manipulation of the argument userid results in...

CVE-2025-9730 itsourcecode Apartment Management System updateProfile.php sql injection

A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument userid results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-9730

CVE-2025-9730 affects itsourcecode Apartment Management System 1.0. The vulnerability lies in an unknown function in /ajax/updateProfile.php where manipulating the user_id parameter leads to SQL injection. This can be exploited remotely and an exploit has been publicized. CVSS v3.1 base metrics i...

CVE-2025-7886

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argument userid leads to sql injection. It...

SourceCodester Best Salon Management System 注入漏洞

SourceCodester Best Salon Management System is SourceCodester open source a salon management system. SourceCodester Best Salon Management System version 1.0 has an injection vulnerability, the vulnerability stems from the wrong operation of the parameter userid/planid in the file...

CVE-2025-6502

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /phpaction/changePassword.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-6160 SourceCodester Client Database Management System user_customer_create_order.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /usercustomercreateorder.php. The manipulation of the argument userid leads to sql injection. The attack may be initiat...

CVE-2023-1035

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as critical. Affected is an unknown function of the file updateuser.php. The manipulation of the argument userid leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2019-13189

In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...

CVE-2008-7309

Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the ForumPost userid value via a modified URL, related to a "mass assignment" vulnerability...