CVE-2025-70063

The PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference (IDOR) vulnerability within its 'Medical History' module. The root cause is the application's failure to verify that the requested 'viewid' parameter belongs to the currently authenticated patient. An atta...

EUVD-2025-29128

Malicious code in bioql PyPI...

CVE-2025-11101

A security flaw has been discovered in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/company/index.php?view=edit. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2025-10825 Campcodes Online Beauty Parlor Management System view-appointment.php sql injection

A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack can be initiated remotely. The exploit is publicly available...

Online Nurse Hiring System view-request.php File SQL Injection Vulnerability

Online Nurse Hiring System is an online nurse hiring system. Online Nurse Hiring System suffers from a SQL injection vulnerability that originates from the lack of validation of the viewid parameter in the file /admin/view-request.php against an externally-entered SQL statement. An attacker can u...

SourceCodester Online Eyewear Shop Website SQL注入漏洞

SourceCodester Online Eyewear Shop Website is an online eyewear store website project developed by SourceCodester using PHP and MySQL, which provides an online shopping and ordering platform for eyewear business and its potential customers. A SQL injection vulnerability exists in SourceCodester...

PT-2024-29145 · Sourcecodester · Sourcecodester Simple Subscription Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Subscription Website version 1.0 Description: A critical issue was found in the software, affecting an unknown function of the file view application.php. The manipulation of the id argument leads to SQL injection. It is...

CVE-2023-33677: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

CVE-2023-31936

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...

PT-2023-23530 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A sql injection issue allows a remote attacker to execute arbitrary code via the viewid parameter of the "view-enquiry.php" file. Recommendations: For Rail Pass Management System version 1....

CVE-2022-36676

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/viewcategory.php...

PT-2022-21039

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "/eris/admin/applicants/index.php?view=view&id=" endpoint. The id variable is vulnerable to injection attacks. No...

CVE-2022-29008

An insecure direct object reference IDOR vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive information...

SourceCodester College Website Management System SQL注入漏洞

SourceCodester College Website Management System is an application of SourceCodester, Inc. SourceCodester College Website Management System version 1.0 is vulnerable to SQL injection, which originates from the lack of user-supplied data and output data in the id parameter of...

PT-2019-18893

Name of the Vulnerable Software and Affected Versions Magento 2.2 versions prior to 2.2.10 Magento 2.3 versions prior to 2.3.3 or 2.3.2-p1 Description A stored cross-site scripting XSS issue exists, allowing an authenticated user to inject arbitrary JavaScript code via product view id...

CVE-2019-8117: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticates user can inject arbitrary JavaScript code via product view id specification...