1026 matches found
CVE-2025-23525
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kvvaradha Kv Compose Email From Dashboard kv-send-email-from-admin allows Reflected XSS.This issue affects Kv Compose Email From Dashboard: from n/a through = 1.1...
Beauty Parlour Management System 安全漏洞
Beauty Parlour Management System is a beauty salon management system by Darkseid Personal Developer. A security vulnerability exists in Beauty Parlour Management System version V1.1, which originates from a SQL injection vulnerability in the file /bpms/index.php that allows remote attackers to...
PT-2025-7126 · Unknown · Beauty Parlour Management System
Name of the Vulnerable Software and Affected Versions: Source Code and Project Beauty Parlour Management System version V1.1 Description: A SQL Injection issue was found in the /bpms/index.php endpoint, allowing remote attackers to execute arbitrary code via the name POST request parameter...
CVE-2025-1199
A vulnerability was found in SourceCodester Best Church Management Software 1.1. It has been classified as critical. This affects an unknown part of the file /admin/app/rolecrud.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...
PT-2025-6846 · Sourcecodester · Sourcecodester Best Church Management
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.1 Description: A critical issue affects the processing of the file /admin/app/profile crud.php, leading to sql injection. The attack may be initiated remotely. Multiple parameters might...
PT-2025-6844 · Sourcecodester · Sourcecodester Best Church Management
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.1 Description: A critical issue has been found in the software, affecting an unknown part of the file /admin/app/role crud.php. The manipulation of the id argument leads to SQL injectio...
SourceCodester Best Church Management Software 注入漏洞
SourceCodester Best Church Management Software is an open source church management software from Sourcecodester. An injection vulnerability exists in SourceCodester Best Church Management Software version 1.1, which stems from an incorrect manipulation of the parameter id that can lead to SQL...
PT-2025-7080 · Unknown · Phpgurukul Daily Expense Tracker System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Daily Expense Tracker System version 1.1 Description: The issue concerns a SQL Injection vulnerability in the /dets/add-expense.php endpoint via the costitem parameter. This allows for potential exploitation of the system. No...
SourceCodester Best Church Management Software 注入漏洞
SourceCodester Best Church Management Software is an open source church management software from Sourcecodester. An injection vulnerability exists in SourceCodester Best Church Management Software version 1.1, which originates from an unknown section of the /admin/app/rolecrud.php file that does...
PT-2025-6845 · Sourcecodester · Sourcecodester Best Church Management
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.1 Description: A critical issue has been identified, affecting unknown code in the file /admin/app/slider crud.php. The manipulation of the del id argument leads to SQL injection. This...
SourceCodester Best Church Management Software 注入漏洞
SourceCodester Best Church Management Software is an open source church management software from Sourcecodester. An injection vulnerability exists in SourceCodester Best Church Management Software version 1.1. An attacker exploiting this vulnerability could perform a SQL injection attack...
CVE-2025-25074
Cross-Site Request Forgery CSRF vulnerability in Nirmal Kumar Ram WP Social Stream wp-social-stream allows Stored XSS.This issue affects WP Social Stream: from n/a through = 1.1...
PT-2025-5961 · Unknown · Djjmz Simple Auto Tag
Name of the Vulnerable Software and Affected Versions: djjmz Simple Auto Tag versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...
PT-2025-5913 · Nirmal Kumar Ram · Wp Social Stream
Name of the Vulnerable Software and Affected Versions: WP Social Stream versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Nirmal Kumar Ram WP Social Stream. Recommendations: For WP Social Stream versions 1.1 and earlier,...
CVE-2025-23476
Cross-Site Request Forgery CSRF vulnerability in isnowfy my-related-posts my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through = 1.1...
CVE-2025-23702
Cross-Site Request Forgery CSRF vulnerability in Schalk Burger Anonymize Links anonymize-links allows Stored XSS.This issue affects Anonymize Links: from n/a through = 1.1...
CVE-2024-50479
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chenyenming Woocommerce Quote Calculator woo-quote-calculator-order allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through = 1.1...
CVE-2024-50504
Incorrect Privilege Assignment vulnerability in webxmedia Bulk Change Role bulk-role-change allows Privilege Escalation.This issue affects Bulk Change Role: from n/a through = 1.1...
CVE-2024-54433
Cross-Site Request Forgery CSRF vulnerability in Marcel CL Simple Booking Widget simple-booking-widget allows Stored XSS.This issue affects Simple Booking Widget: from n/a through = 1.1...