PT-2025-13489

Name of the Vulnerable Software and Affected Versions The Visitor Counter versions 1.4.3 and earlier Description A Cross-Site Request Forgery CSRF issue in The Visitor Counter allows for Stored XSS. Recommendations For versions 1.4.3 and earlier, update to a version that fixes the CSRF...

WordPress plugin The Visitor Counter 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerabilit...

Mars: debug.log leaked [█████████]

The report identified a security vulnerability in the visitor management system that exposed a debug log file containing personally identifiable information. The log file was publicly accessible without authentication, allowing unauthorized access to sensitive user data. The vulnerability was...

CVE-2025-2652

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. The attack can be launched...

CVE-2025-2652: Exposure of Information Through Directory Listing

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. The attack can be launched...

PT-2025-12538

Name of the Vulnerable Software and Affected Versions SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description A vulnerability has been found in the system, classified as problematic, which leads to exposure of information through directory listing. The attack can be...

CVE-2025-2473

A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attack may be...

Company Visitor Management System /index.php File SQL Injection Vulnerability

Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter username in the /index.php file of the component Sign In against an externally-entered SQL...

Apartment Visitors Management System username parameter SQL Injection Vulnerability

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement for the parameter username. An attacker can exploit this...

CVE-2025-2473

A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attack may be...

CVE-2025-2472

A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attac...

CVE-2025-2473

A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attack may be...

CVE-2025-2473

CVE-2025-2473 affects PHPGurukul Company Visitor Management System 2.0. The SQL injection vulnerability resides in Sign In, via /index.php with the username parameter. Exploitation is remote and unauthenticated per sources; multiple feeds classify impact as high/critical. The NVD metrics show net...

CVE-2025-2473 PHPGurukul Company Visitor Management System Sign In index.php sql injection

A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attack may be...

CVE-2025-2473 PHPGurukul Company Visitor Management System Sign In index.php sql injection

A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attack may be...

PT-2025-11570

Name of the Vulnerable Software and Affected Versions PHPGurukul Company Visitor Management System version 2.0 Description A critical vulnerability was found in the PHPGurukul Company Visitor Management System, affecting an unknown functionality of the file /index.php of the component Sign In. Th...

CVE-2025-2473: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attack may be...

PHPGurukul Apartment Visitors Management System 注入漏洞

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter visname. An attacker can exploit this...

PHPGurukul Company Visitor Management System 安全漏洞

Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter username in the /index.php file of the component Sign In against an externally-entered SQL...

Malicious code in visitor-targeting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca6cecf4a890fc8933768778472fc64e474611f8a925b5d2da43a2cccbe971a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...