Aranda PassRecovery 安全漏洞

Aranda PassRecovery is a password recovery tool from the Colombian company Aranda. A security vulnerability exists in Aranda PassRecovery version 1.0, which stems from an unauthenticated specially crafted POST request that could lead to the enumeration of valid user accounts in Active Directory...

WordPress plugin Google+ Comments cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-39660

Name of the Vulnerable Software and Affected Versions Sourcecodester Employee Management System version 1.0 Description The software is susceptible to Cross Site Scripting XSS attacks. The vulnerability is located in the 'Add Designation' functionality. The Add Designation feature does not proper...

CVE-2025-10828

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly an...

CVE-2025-10797

A vulnerability was determined in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /justines/index.php. This manipulation of the argument logemail causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed...

CVE-2025-10837 code-projects Simple Food Ordering System order.php cross site scripting

A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /ordersimple/order.php. The manipulation of the argument ID leads to cross site scripting. The attack may be initiated remotely. The...

SourceCodester Pet Grooming Management Software 安全漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A security vulnerability exists in version 1.0 of SourceCodester Pet Grooming Management Software, which stems from an incorrect manipulation of the parameter barcode in the file...

PT-2025-39101

Name of the Vulnerable Software and Affected Versions Campcodes Computer Sales and Inventory System version 1.0 Description A flaw exists in Campcodes Computer Sales and Inventory System version 1.0 related to the processing of the /pages/inv edit1.php file. Manipulation of the idd argument can...

1000 Projects Bookstore Management System SQL注入漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which stems from an incorrect manipulation of the parameter unm in the file /login.php, which...

Tenda AC9 安全漏洞

Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC9 version 1.0, which originates from a buffer overflow in the user-supplied sys.vendor configuration value...

Weitong Mall 授权问题漏洞

Weitong Mall is a shopping mall system developed by fuyanglipengjun. An authorization issue vulnerability exists in Weitong Mall version 1.0, which originates from improper authorization of the SysSmsLogController function in the file /sys/smslog/queryAll, and could lead to a remote attack...

CampCodes Computer Sales and Inventory System 安全漏洞

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. A security vulnerability exists in CampCodes Computer Sales and Inventory System version 1.0, which stems from the incorrect manipulation of the parameter prodcode in the file...

PT-2025-39119

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description A flaw exists in SourceCodester Pet Grooming Management Software that allows for SQL injection. This occurs through manipulation of the sql111 argument in the file...

PT-2025-39123

Name of the Vulnerable Software and Affected Versions Reservation Online Hotel Reservation System version 1.0 Description A flaw exists in an unknown functionality of the file '/reservation/paypalpayout.php'. Manipulation of the confirm argument can lead to SQL injection. The attack can be launch...

CampCodes Computer Sales and Inventory System 安全漏洞

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. A security vulnerability exists in CampCodes Computer Sales and Inventory System version 1.0, which stems from incorrect manipulation of the parameter ID in the file...

Tenda AC9 安全漏洞

Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC9 version 1.0, which originates from the improper handling of the usb.samba.guest.user parameter in the formSetSambaConf function in the httpd file, which may lead to OS command injection...

CampCodes Gym Management System SQL注入漏洞

CampCodes Gym Management System is a gym management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /ajax.php, which could lead to a SQL injecti...

SourceCodester Pet Grooming Management Software SQL注入漏洞

SourceCodester Pet Grooming Management Software is a SourceCodester open source pet grooming management system. SourceCodester Pet Grooming Management Software version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

CVE-2025-10813 code-projects Hostel Management System index.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/modreports/index.php. The manipulation of the argument Home results in sql injection. It is possible to launch the attack remotely. The exploit has been made public...

CVE-2025-57902

Cross-Site Request Forgery CSRF vulnerability in Md Taufiqur Rahman RIS Version Switcher – Downgrade or Upgrade WP Versions Easily ris-version-switcher allows Cross Site Request Forgery.This issue affects RIS Version Switcher – Downgrade or Upgrade WP Versions Easily: from n/a through = 1.0...