1300 matches found
MAL-2025-2430 Malicious code in visitor-targeting (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca6cecf4a890fc8933768778472fc64e474611f8a925b5d2da43a2cccbe971a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Apartment Visitors Management System editid Parameter SQL Injection Vulnerability
Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the editid parameter of file /visitor-detail.php. An...
CVE-2025-2052
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack may be initiated remotely. The...
CVE-2025-2053
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2025-2053 PHPGurukul Apartment Visitors Management System visitor-detail.php sql injection
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2025-2053 PHPGurukul Apartment Visitors Management System visitor-detail.php sql injection
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The...
PT-2025-10020
Name of the Vulnerable Software and Affected Versions PHPGurukul Apartment Visitors Management System version 1.0 Description A critical issue was found in the system, affecting an unknown function of the file /visitor-detail.php. The manipulation of the editid argument leads to SQL injection. Th...
CVE-2025-2053: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The...
PHPGurukul Apartment Visitors Management System 注入漏洞
Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the editid parameter of file /visitor-detail.php. An...
CVE-2025-25132
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ravi Singh Visitor Details visitors-details allows Stored XSS.This issue affects Visitor Details: from n/a through = 1.0.1...
CVE-2025-25132
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ravi Singh Visitor Details visitors-details allows Stored XSS.This issue affects Visitor Details: from n/a through = 1.0.1...
CVE-2025-25132
CVE-2025-25132 is a stored XSS in the WordPress plugin Visitor Details (versions
CVE-2025-25132 WordPress Visitor Details plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ravi Singh Visitor Details allows Stored XSS. This issue affects Visitor Details: from n/a through 1.0.1...
CVE-2025-25132 WordPress Visitor Details plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ravi Singh Visitor Details visitors-details allows Stored XSS.This issue affects Visitor Details: from n/a through = 1.0.1...
CVE-2025-25132: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ravi Singh Visitor Details visitors-details allows Stored XSS.This issue affects Visitor Details: from n/a through = 1.0.1...
PT-2025-9450
Name of the Vulnerable Software and Affected Versions ravi Singh Visitor Details versions n/a through 1.0.1 Description The issue is related to improper neutralization of input during web page generation, which leads to a Stored XSS vulnerability. This allows for the storage of malicious scripts...
CVE-2025-26200
SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitorreportday.php component...
PT-2025-7773 · Slims · Slims
Name of the Vulnerable Software and Affected Versions: SLIMS version 9.6.1 Description: The issue allows a remote attacker to escalate privileges via the month parameter in the visitor report day.php component. This is a result of SQL injection in the affected software. Recommendations: For SLIMS...