itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is an enterprise portal site of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Open Source Job Portal, which stems from incorrect manipulation of the parameter ID in the file /admin/employee/index.php, which could...

CampCodes Online Learning Management System SQL注入漏洞

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in CampCodes Online Learning Management System version 1.0, which stems from an incorrect manipulation of the parameter schoolyear in the file...

CodeAstro Online Leave Application SQL注入漏洞

CodeAstro Online Leave Application is an online leave application system from CodeAstro, Inc. A SQL injection vulnerability exists in CodeAstro Online Leave Application version 1.0, which stems from incorrect manipulation of the parameter city in the file /signup.php, which could lead to a SQL...

CampCodes Computer Sales and Inventory System SQL注入漏洞

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. CampCodes Computer Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

PT-2025-39753

Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A SQL injection issue exists due to the manipulation of the ID argument. This affects an unknown function within the file '/admin/employee/index.php?view=edit'. The attack can be...

itsourcecode Hostel Management System 代码注入漏洞

itsourcecode Hostel Management System is an open source hostel management system from itsourcecode. A code injection vulnerability exists in version 1.0 of itsourcecode Hostel Management System, which stems from improper manipulation of the parameter from in the component POST Request Handler in...

PT-2025-39756

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A security issue exists in code-projects E-Commerce Website 1.0. The issue involves SQL injection within the file /pages/admin product details.php. Manipulation of the prod id argument c...

itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is itsourcecode open source a business portal site . A SQL injection vulnerability exists in itsourcecode Open Source Job Portal version 1.0, which stems from incorrect manipulation of the parameter ID in the file /jobportal/admin/company/index.php, which could...

CodeAstro Electricity Billing System SQL注入漏洞

CodeAstro Electricity Billing System is an electricity billing system from CodeAstro. CodeAstro Electricity Billing System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter uid in the file /admin/bill.php, which could lead to a SQL...

CVE-2025-11079

The CVE-2025-11079 entry concerns Campcodes Farm Management System version 1.0. Affected component is some unknown functionality that allows file and directory information disclosure. The vulnerability may be exploited remotely and, per sources, the exploit has been released publicly. The exact r...

CVE-2025-11079 Campcodes Farm Management System file information disclosure

A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this issue is some unknown functionality. The manipulation results in file and directory information exposure. The attack may be performed from remote. The exploit has been released to the public and may be...

WordPress plugin The Trust Reviews plugin for Google Tripadvisor Yelp Airbnb and other platforms 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

CourseSelectionSystem SQL注入漏洞

CourseSelectionSystem is a simple online course selection system by kidaze individual developer. A SQL injection vulnerability exists in CourseSelectionSystem version 1.0, which originates from an incorrect manipulation of the parameter csslc in the file /Profilers/PriProfile/COUNT3s5.php, which...

SourceCodester Pet Grooming Management Software 安全漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A security vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which stems from an unknown code mishandling that could lead to a cross-site reques...

Projectworlds Visitor Management System 代码注入漏洞

Projectworlds Visitor Management System is a visitor access management system from Projectworlds India. It implements self-service features for visitors. A code injection vulnerability exists in Projectworlds Visitor Management System version 1.0, which stems from an incorrect manipulation of the...

CampCodes Farm Management System 安全漏洞

CampCodes Farm Management System is a farm management system from CampCodes Philippines, Inc. A security vulnerability exists in CampCodes Farm Management System version 1.0, which stems from the improper operation of an unknown function that could lead to the disclosure of file and directory...

CVE-2025-11018 Four-Faith Water Conservancy Informatization Platform download.do;usrlogout.do.do path traversal

A flaw has been found in Four-Faith Water Conservancy Informatization Platform 1.0. This affects an unknown function of the file /sysRole/index.do/../../generalReport/download.do;usrlogout.do.do. Executing manipulation of the argument fileName can lead to path traversal. It is possible to launch...

CVE-2025-60186 WordPress Google+ Comments Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Moss Google+ Comments google-plus-comments allows Stored XSS.This issue affects Google+ Comments: from n/a through = 1.0...

CVE-2025-60170

CVE-2025-60170 refers to HTACCESS IP Blocker (WordPress plugin). Connected sources confirm the entry exists and note vulnerability type as Cross-Site Request Forgery (CSRF) with the patch status shown as Unpatched in the Wordfence vulnerability digest. The initial description attributes a CSRF co...

itsourcecode Online Clinic Management System SQL注入漏洞

itsourcecode Online Clinic Management System is an online clinic management system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Clinic Management System, which stems from an incorrect manipulation of the parameter ID in the file...