CVE-2025-9009

The CVE covers itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function in /admin/email_setup.php where manipulating the Name argument triggers SQL injection. The issue allows remote exploitation and the exploit has been disclosed publicly. Connected sources cons...

CVE-2025-8993 itsourcecode Online Tour and Travel Management System expense_report.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/expensereport.php. The manipulation of the argument fromdate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...

itsourcecode Online Tour and Travel Management System 注入漏洞

itsourcecode Online Tour and Travel Management System is itsourcecode open source an online tour and travel management system . An injection vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which originates from a SQL injection due to incorrect...

PT-2025-33476 · Projectworlds · Visitor Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Visitor Management System version 1.0 Description: A vulnerability has been found in projectworlds Visitor Management System 1.0. The manipulation of the argument rid in an unknown function of the file /visitor out.php leads to...

Projectworlds Travel management System 安全漏洞

Projectworlds Travel management System is a travel management system from Projectworlds India. A security vulnerability exists in Projectworlds Travel management System version 1.0, which is caused by SQL injection due to improper handling of parameter t1 in file /updatecategory.php...

PT-2025-33455 · Sourcecodester · Sourcecodester Online Dj Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Bank Management System version 1.0 Description: A vulnerability exists in SourceCodester Online Bank Management System up to version 1.0. The issue affects unknown code within the /bank/transfer.php file. Manipulation of...

PT-2025-33470 · Unknown · Simple Cafe Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Cafe Ordering System version 1.0 Description: A vulnerability exists in the Simple Cafe Ordering System that allows for SQL injection. The issue is located in an unknown functionality within the /portal.php file. Manipulation of the ID...

PT-2025-33472 · Code Projects · Online Medicine Guide

Name of the Vulnerable Software and Affected Versions: code-projects Online Medicine Guide version 1.0 Description: A vulnerability has been found in code-projects Online Medicine Guide 1.0. The manipulation of the argument deName in the file /addelivery.php leads to SQL injection. The attack can...

PT-2025-33456 · Sourcecodester · Online Bank Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Bank Management System version 1.0 Description: A vulnerability exists in the processing of the /bank/statements.php file. Manipulation of the email argument can lead to SQL injection, potentially allowing for remote...

PT-2025-33474 · Unknown · Online Medicine Guide

Name of the Vulnerable Software and Affected Versions: code-projects Online Medicine Guide version 1.0 Description: A vulnerability exists due to SQL injection. The issue is related to unknown processing of the file /adphar.php. Manipulation of the phuname argument leads to SQL injection and may ...

WordPress plugin Inpersttion For Theme 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A code injection vulnerability...

PT-2025-33441 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection vulnerability exists in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is located in an unknown function within the...

CVE-2025-8972

A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/page-login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-8972

CVE-2025-8972 affects itsourcecode Online Tour and Travel Management System 1.0. A SQL injection exists in /admin/page-login.php due to improper handling of the email parameter, enabling remote exploitation without authentication. Public disclosure of the exploit is noted. Impact is described acr...

CVE-2025-8969

The CVE-2025-8969 issue affects itsourcecode Online Tour and Travel Management System 1.0, specifically its /admin/approve_user.php functionality. The vulnerability is a SQL injection caused by manipulation of the ID parameter, exploitable remotely. Multiple connected sources corroborate a public...

CVE-2025-8964

CVE-2025-8964 affects code-projects’ Hostel Management System 1.0, specifically the Login component via the hostel_manage.exe file. The vulnerability is described as improper authentication, enabling a local-host attack. The PT-2025-33299 entry confirms the issue and states the exploit has been p...

CVE-2025-49065

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BestiaDurmiente Visit Counter visit-counter allows Stored XSS.This issue affects Visit Counter: from n/a through = 1.0...

CVE-2025-49437 WordPress WP LOL Rotation <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in worstguy WP LOL Rotation league-of-legends-rotation allows Stored XSS.This issue affects WP LOL Rotation: from n/a through = 1.0...

CVE-2025-49437

CVE-2025-49437 affects the WordPress plugin WP LOL Rotation (versions n/a through 1.0). The issue is Improper Neutralization of Input During Web Page Generation, i.e., a Stored XSS vulnerability. Public sources describe the vulnerability and CVSS v3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:...

CVE-2025-49437 WordPress WP LOL Rotation <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in worstguy WP LOL Rotation league-of-legends-rotation allows Stored XSS.This issue affects WP LOL Rotation: from n/a through = 1.0...