6.9

CVSS4.0

CVE-2025-5579 - PHPGurukul Dairy Farm Shop Management System search-product.php sql injection

A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this issue is some unknown functionality of the file /search-product.php. The manipulation of the argument productname leads to sql injection. The attack may be launched remotely. T…

📅 Published: June 4, 2025, 8 a.m. 🔄 Last Modified: June 4, 2025, 6:27 p.m.

6.9

CVSS4.0

CVE-2025-5578 - PHPGurukul Dairy Farm Shop Management System sales-report-details.php sql injection

A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sales-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be…

📅 Published: June 4, 2025, 8 a.m. 🔄 Last Modified: June 4, 2025, 6:27 p.m.

6.9

CVSS4.0

CVE-2025-5577 - PHPGurukul Dairy Farm Shop Management System profile.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The exploit…

📅 Published: June 4, 2025, 7:31 a.m. 🔄 Last Modified: June 4, 2025, 6:28 p.m.

6.9

CVSS4.0

CVE-2025-5576 - PHPGurukul Dairy Farm Shop Management System bwdate-report-details.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This issue affects some unknown processing of the file /bwdate-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initia…

📅 Published: June 4, 2025, 7:31 a.m. 🔄 Last Modified: June 4, 2025, 6:28 p.m.

7.3

CVSS4.0

CVE-2025-47727 - Out-of-bounds Write in CNCSoft

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

📅 Published: June 4, 2025, 7:25 a.m. 🔄 Last Modified: July 11, 2025, 5:57 p.m.

4.8

CVSS3.1

CVE-2025-27444 - Extension - rsjoomla.com - A reflected XSS vulnerability RSform!Pro component 3.0.0 - 3.3.13 for Jo…

A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered. The issue arises from the improper handling of the filter[dateFrom] GET parameter, which is reflected unescaped in the administrative backend interface. This allows an authenticated attacker with admin o…

📅 Published: June 4, 2025, 7:24 a.m. 🔄 Last Modified: June 9, 2025, 3:04 p.m.

7.3

CVSS4.0

CVE-2025-47726 - Out-of-bounds Write in CNCSoft

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

📅 Published: June 4, 2025, 7:24 a.m. 🔄 Last Modified: July 11, 2025, 5:56 p.m.

7.3

CVSS4.0

CVE-2025-47725 - Out-of-bounds Write in CNCSoft

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

📅 Published: June 4, 2025, 7:23 a.m. 🔄 Last Modified: July 11, 2025, 5:56 p.m.

7.3

CVSS4.0

CVE-2025-47724 - Out-of-bounds Write in CNCSoft

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

📅 Published: June 4, 2025, 7:23 a.m. 🔄 Last Modified: July 11, 2025, 5:55 p.m.

8.8

CVSS3.1

CVE-2025-5482 - Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation

The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.11. This is due to the plugin not properly validating a user-supplied key. This makes it possible for auth…

📅 Published: June 4, 2025, 7:21 a.m. 🔄 Last Modified: April 21, 2026, 8:30 p.m.
Total resulsts: 349182
Page 5178 of 34,919
« previous page » next page
Filters