CVE-2025-40682 SQL injection vulnerability in Human Resource Management System

SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint...

PT-2025-31194 · Unknown · Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: Reflected Cross-Site Scripting XSS exists in Human Resource Management System version 1.0. This issue could allow an attacker to execute JavaScript code in the victim's browser by...

Human Resource Management System 跨站脚本漏洞

Human Resource Management System is a Human Resource Management System by maverickosama Individual Developer. A cross-site scripting vulnerability exists in Human Resource Management System version 1.0, which stems from improper parameter manipulation and could lead to a reflective cross-site...

PHPGurukul Nipah virus Testing Management System 安全漏洞

PHPGurukul Nipah virus Testing Management System is an online virus diagnostic platform from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Nipah Virus Testing Management System version 1.0, which stems from insufficient validation of the govtissuedid parameter and could lead to an...

Human Resource Management System 跨站脚本漏洞

Human Resource Management System is a Human Resource Management System by maverickosama Individual Developer. A cross-site scripting vulnerability exists in Human Resource Management System version 1.0, which stems from improper parameter manipulation and could lead to a reflective cross-site...

Human Resource Management System 跨站脚本漏洞

Human Resource Management System is a Human Resource Management System by maverickosama Individual Developer. A cross-site scripting vulnerability exists in Human Resource Management System version 1.0, which stems from improper parameter manipulation and could lead to a reflective cross-site...

Human Resource Management System SQL注入漏洞

Human Resource Management System is a Human Resource Management System by maverickosama Personal Developer. A SQL injection vulnerability exists in Human Resource Management System version 1.0, which stems from improper parameter manipulation and could lead to a SQL injection attack...

PT-2025-31061 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists in code-projects Exam Form Submission 1.0, affecting an unknown part of the file /admin/delete s2.php. The manipulation of the ID argument can lead to SQL...

Projectworlds Online Admission System 注入漏洞

Projectworlds Online Admission System is an online admission system from Projectworlds India. An injection vulnerability exists in Projectworlds Online Admission System version 1.0, which stems from an incorrect operation of the parameter markof in the file /admin.php resulting in SQL injection...

CampCodes Courier Management System 注入漏洞

CampCodes Courier Management System is a courier management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Courier Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter ID in the file /viewparcel.php...

PT-2025-31062 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists in code-projects Exam Form Submission 1.0. The vulnerability is located in unknown code within the /admin/delete s3.php file. Manipulation of the ID argument...

PT-2025-31146 · Unknown · Powerstick Wave Dual-Band Wifi Extender

Name of the Vulnerable Software and Affected Versions: PowerStick Wave Dual-Band Wifi Extender version 1.0 Description: An authenticated remote code execution issue in PowerStick Wave Dual-Band Wifi Extender version 1.0 allows an attacker with valid credentials to execute arbitrary commands with...

Vaelsys V4 安全漏洞

Vaelsys V4 is an artificial intelligence video analytics platform from Vaelsys, Spain. A security vulnerability exists in Vaelsys V4 version .1.0, which stems from the manipulation of the parameter xajaxargs in the file /grid/vgridserver.php resulting in the use of a weak hash...

PT-2025-31060 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A vulnerability exists in the file /admin/delete s1.php within the software. Manipulation of the ID argument leads to a SQL injection. The attack can be launched remotely. The exploi...

CampCodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Recruitment Management System version 1.0, which is caused by SQL injection due to the manipulation of the parameter ID in the file...

PT-2025-31034 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists in code-projects Exam Form Submission 1.0 related to SQL injection. The manipulation of the credits argument in the processing of the file /admin/update s3.ph...

Code-Projects Online Ordering System 注入漏洞

Code-Projects Online Ordering System is a Code-Projects open source online ordering system. An injection vulnerability exists in code-projects Online Ordering System version 1.0, which originates from a SQL injection due to the incorrect operation of the parameter firstname in the file /signup.ph...

Code-Projects Exam Form Submission 注入漏洞

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. An injection vulnerability exists in Code-Projects Exam Form Submission version 1.0, which originates from SQL injection due to manipulation of the parameter ID in the file /admin/deletes1.php...

PT-2025-31008 · Code Projects · Code-Projects Online Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A vulnerability exists in the Online Ordering System related to SQL injection. The issue is located in the /admin/delete member.php file. Manipulation of the ID argument can lead t...

PT-2025-31003 · Campcodes · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Courier Management System version 1.0 Description: A critical issue exists in Campcodes Courier Management System version 1.0. The vulnerability is a SQL injection that occurs through the manipulation of the s argument in the /parce...