EUVD-2022-52634

Malicious code in bioql PyPI...

CVE-2025-55194

Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...

PHPGurukul Vehicle Parking Management System 安全漏洞

PHPGurukul Vehicle Parking Management System is an open source parking management system by PHPGurukul. A security vulnerability exists in PHPGurukul Vehicle Parking Management System v1.13, which originates from a stored cross-site scripting vulnerability in the /users/profile.php file...

CVE-2022-42034

Wedding Planner v1.0 is vulnerable to arbitrary code execution via usersprofile.php...

Wedding Planner 代码问题漏洞

Wedding Planner is a wedding planner program by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. A code issue vulnerability exists in Wedding Planner v1.0 that stems from easy execution of arbitrary code via...

CVE-2022-30822

In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersprofile.php" file...

CVE-2022-30822

In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersprofile.php" file...

PG All Share Video SQL Injection Vulnerability

PG All Share Video is a set of video sharing website scripts. A SQL injection vulnerability exists in PG All Share Video version 1.0. A remote attacker can exploit this vulnerability by sending PATHINFO to search/tag, friends/index, or users/profile to inject SQL commands...

Sql injection

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

CVE-2017-15969

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

CVE-2017-15969

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...