6.9

CVSS4.0

CVE-2025-5370 - PHPGurukul News Portal forgot-password.php sql injection

A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has b…

πŸ“… Published: May 31, 2025, 5:31 a.m. πŸ”„ Last Modified: June 9, 2025, 6:59 p.m.

6.9

CVSS4.0

CVE-2025-5369 - SourceCodester PHP Display Username After Login login.php sql injection

A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been …

πŸ“… Published: May 31, 2025, 5 a.m. πŸ”„ Last Modified: June 9, 2025, 6:59 p.m.

5.3

CVSS4.0

CVE-2025-5368 - PHPGurukul Daily Expense Tracker System expense-yearwise-reports-detailed.php sql injection

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /expense-yearwise-reports-detailed.php. The manipulation of the argument todate leads to sql injection. The attack may be initiated remotel…

πŸ“… Published: May 31, 2025, 4 a.m. πŸ”„ Last Modified: June 3, 2025, 3:32 p.m.

4.7

CVSS3.1

CVE-2025-5016 - Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting v…

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Excerpt Highlights in all versions up to, and including, 4.24.5 (Free) and 2.27.6 (Premium) due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat…

πŸ“… Published: May 31, 2025, 3:26 a.m. πŸ”„ Last Modified: April 8, 2026, 5:35 p.m.

6.9

CVSS4.0

CVE-2025-5367 - PHPGurukul Online Shopping Portal Project category.php sql injection

A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument Product leads to sql injection. The attack can be initiated remotely. The exploit has bee…

πŸ“… Published: May 31, 2025, 1:31 a.m. πŸ”„ Last Modified: June 3, 2025, 3:33 p.m.

6.9

CVSS4.0

CVE-2025-5365 - Campcodes Online Hospital Management System patient-search.php sql injection

A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. T…

πŸ“… Published: May 31, 2025, 12:31 a.m. πŸ”„ Last Modified: June 3, 2025, 3:34 p.m.

5.1

CVSS3.1

CVE-2018-25111 -

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.

πŸ“… Published: May 31, 2025, midnight πŸ”„ Last Modified: June 16, 2025, 4:25 p.m.

6.9

CVSS4.0

CVE-2025-5364 - Campcodes Online Hospital Management System add-patient.php sql injection

A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /doctor/add-patient.php. The manipulation of the argument patname leads to sql injection. The attack may be launched remotely. Th…

πŸ“… Published: May 30, 2025, 9:31 p.m. πŸ”„ Last Modified: June 3, 2025, 3:34 p.m.

6.9

CVSS4.0

CVE-2025-5363 - Campcodes Online Hospital Management System index.php sql injection

A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /doctor/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remote…

πŸ“… Published: May 30, 2025, 9 p.m. πŸ”„ Last Modified: June 3, 2025, 3:34 p.m.

6.9

CVSS4.0

CVE-2025-5362 - Campcodes Online Hospital Management System doctor-specilization.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to launch the att…

πŸ“… Published: May 30, 2025, 8:31 p.m. πŸ”„ Last Modified: June 3, 2025, 3:34 p.m.
Total resulsts: 343926
Page 4688 of 34,393
Β« previous page Β» next page
Filters