CVE-2025-49421 WordPress WP Text Expander <= 1.0.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Andrei Filonov WP Text Expander allows SQL Injection. This issue affects WP Text Expander: from n/a through 1.0.1...

CVE-2025-5756 code-projects Real Estate Property Management System EditCity.php sql injection

A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/EditCity.php. The manipulation leads to sql injection. The attack can be launched remotely. The...

CVE-2025-5556

A vulnerability, which was classified as critical, was found in PHPGurukul Teacher Subject Allocation Management System 1.0. This affects an unknown part of the file /admin/edit-teacher-info.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack...

PT-2025-24257 · WordPress · Wp Text Expander

Name of the Vulnerable Software and Affected Versions: WP Text Expander versions 1.0.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations:...

PT-2025-24095 · Unknown · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue has been found in the PHPGurukul BP Monitoring Management System, affecting the processing of the file /edit-family-member.php. The manipulation of the...

PT-2025-23999 · Unknown · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue was found in the code, affecting the /Admin/InsertCategory.php file. The manipulation of the txtCategoryName argument leads to SQL injection. This...

PT-2025-24277 · 1000 Projects · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects ABC Courier Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /adminSQL. The manipulation of the Username argument leads to SQL injection. This issue c...

CVE-2025-5698

A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /sysframework/logSelect.htm. The manipulation of the argument nodename leads to sql injection. It is possible to launch the attack...

WordPress WP Text Expander plugin <= 1.0.1 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Chu The Anh in WordPress Plugin WP Text Expander versions = 1.0.1...

WordPress Persian Woocommerce SMS plugin <= 7.0.10 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by astra.r3verii in WordPress Plugin Persian Woocommerce SMS versions = 7.0.10...

PT-2025-23942 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Medical Card Generation System version 1.0 Description: A critical issue was found in the PHPGurukul Medical Card Generation System. This issue affects the file /admin/unreadenq.php and is related to the manipulation of the ID...

CVE-2025-5599 PHPGurukul Student Result Management System editmyexp.php sql injection

A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the argument emp1ctc leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-5560

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

CVE-2025-46011

Listmonk v4.1.0 fixed in v5.0.0 is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges...

CVE-2025-46154

Foxcms v1.25 has a SQL time injection in the $POST'dbname' parameter of installdb.php...

CVE-2025-5433 Fengoffice Feng Office index.php sql injection

A vulnerability was found in Fengoffice Feng Office 3.5.1.5 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php?c=account&a=settimezone. The manipulation of the argument tzoffset leads to sql injection. The attack may be launched remotely. The...

CVE-2025-5388

CVE-2025-5388 affects JeeWMS up to 20250504, specifically the vulnerable function dogenerate in the endpoint "/generateController.do?dogenerate". Affects remote exploitation via SQL injection resulting from this function. Several connected sources corroborate the same vulnerability details and in...

PT-2025-23413 · Jeewms · Jeewms

Name of the Vulnerable Software and Affected Versions: JeeWMS up to 20250504 Description: A critical vulnerability was found in JeeWMS, affecting the dogenerate function of the file "/generateController.do?dogenerate". This vulnerability leads to SQL injection and can be launched remotely...

PT-2025-23381 · Sourcecodester · Sourcecodester Health Center Patient Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Health Center Patient Record Management System. The issue affects some unknown functionality ...

CVE-2025-5363 Campcodes Online Hospital Management System index.php sql injection

A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /doctor/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched...