933 matches found
PT-2025-29434 · Phpgurukul · Phpgurukul Online Fire Reporting System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue exists in PHPGurukul Online Fire Reporting System version 1.2 related to SQL injection. The vulnerability is located in the processing of the /admin/add-team.ph...
PHPGurukul Online Fire Reporting System 注入漏洞
PHPGurukul Online Fire Reporting System is an online fire reporting system from PHPGurukul Inc. An injection vulnerability exists in version 1.2 of the PHPGurukul Online Fire Reporting System, which stems from SQL injection due to incorrect manipulation of the parameter webtitle in the file...
Jenkins plugin Warrior Framework 安全漏洞
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...
WordPress eDS Responsive Menu plugin <= 1.2 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Mika in WordPress Plugin eDS Responsive Menu versions = 1.2...
CVE-2025-5616
A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be launched remotely...
CVE-2025-5612
A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerability affects unknown code of the file /reporting.php. The manipulation of the argument fullname leads to sql injection. The attack can be initiated remotely. The exploit has bee...
PHPGurukul Online Fire Reporting System 注入漏洞
Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fullname in the file /reporting.php. The vulnerability c...
PT-2025-23862 · Unknown · Phpgurukul Online Fire Reporting System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been found in the PHPGurukul Online Fire Reporting System, affecting the /reporting.php file. The manipulation of the fullname argument leads to SQL...
PHPGurukul Online Fire Reporting System 注入漏洞
Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter requestid in the file /request-details.php. An attacker ca...
CVE-2024-9346
The Embed videos and respect privacy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'v' parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-51209
Cross-Site Scripting XSS vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice page and client search invoice page...
CVE-2024-37936
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in labibahmed Tabs For WPBakery Page Builder allows Stored XSS.This issue affects Tabs For WPBakery Page Builder: from n/a through 1.2...
CVE-2023-28419
Cross-Site Request Forgery CSRF vulnerability in Stranger Studios Force First and Last Name as Display Name plugin = 1.2 versions...
CVE-2023-41850
Cross-Site Request Forgery CSRF vulnerability in Morris Bryant, Ruben Sargsyan Outbound Link Manager plugin = 1.2 versions...
CVE-2023-41858
Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...
CVE-2023-51504
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Dulaney Dan's Embedder for Google Calendar allows Stored XSS.This issue affects Dan's Embedder for Google Calendar: from n/a through 1.2...
CVE-2023-37997
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Dharmesh Patel Post List With Featured Image plugin = 1.2 versions...
CVE-2021-38217
SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...
CVE-2020-11000
GreenBrowser before version 1.2 has a vulnerability where apps that rely on URL Parsing to verify that a given URL is pointing to a trust server may be susceptible to many different ways to get URL parsing and verification wrong, which allows an attacker to circumvent the access control. This...