Aggregator
诚邀渠道合作伙伴共启新征程
3 months ago
【火绒安全周报】百度副总裁女儿"开盒"事件暴露黑灰产业/微软将停止对Windows10操作系统的支持
3 months ago
诚邀渠道合作伙伴共启新征程
3 months ago
【火绒安全周报】百度副总裁女儿"开盒"事件暴露黑灰产业/微软将停止对Windows10操作系统的支持
3 months ago
CVE-2025-2651 | SourceCodester Online Eyewear Shop 1.0 /oews/admin/ exposure of information through directory listing
3 months ago
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure of information through directory listing.
This vulnerability is traded as CVE-2025-2651. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
It is recommended to change the configuration settings.
Multiple sub-directories are affected.
vuldb.com
Submit #519873: sourcecodester Online Eyewear Shop Website v1.0 Directory traversal [Accepted]
3 months ago
Submit #519873 / VDB-300666
happytraveller
CVE-2025-2650 | PHPGurukul Medical Card Generation System 1.0 download-medical-cards.php searchdata cross site scripting
3 months ago
A vulnerability, which was classified as problematic, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /download-medical-cards.php. The manipulation of the argument searchdata leads to cross site scripting.
The identification of this vulnerability is CVE-2025-2650. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
Submit #519870: projectworlds House rental And Property Listing Project 1.0 SQL Injection [Duplicate]
3 months ago
Submit #519870 / VDB-234245
takakie
CVE-2025-2649 | PHPGurukul Doctor Appointment Management System 1.0 /check-appointment.php searchdata sql injection
3 months ago
A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown code of the file /check-appointment.php. The manipulation of the argument searchdata leads to sql injection.
This vulnerability was named CVE-2025-2649. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-2648 | PHPGurukul Art Gallery Management System 1.0 view-enquiry-detail.php viewid sql injection
3 months ago
A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/view-enquiry-detail.php. The manipulation of the argument viewid leads to sql injection.
This vulnerability is uniquely identified as CVE-2025-2648. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-2647 | PHPGurukul Art Gallery Management System 1.0 /search.php Search sql injection
3 months ago
A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulation of the argument Search leads to sql injection.
This vulnerability is handled as CVE-2025-2647. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-2646 | PHPGurukul Art Gallery Management System 1.0 /admin/admin-profile.php contactnumber sql injection
3 months ago
A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection.
This vulnerability is known as CVE-2025-2646. The attack can be launched remotely. Furthermore, there is an exploit available.
Other parameters might be affected as well.
vuldb.com
CVE-2025-2645 | PHPGurukul Art Gallery Management System 1.0 /product.php artname cross site scripting
3 months ago
A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /product.php. The manipulation of the argument artname leads to cross site scripting.
This vulnerability is traded as CVE-2025-2645. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-2644 | PHPGurukul Art Gallery Management System 1.0 add-art-product.php arttype sql injection
3 months ago
A vulnerability was found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/add-art-product.php. The manipulation of the argument arttype leads to sql injection.
The identification of this vulnerability is CVE-2025-2644. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-2643 | PHPGurukul Art Gallery Management System 1.0 edit-art-type-detail.php?editid=1 arttype sql injection
3 months ago
A vulnerability has been found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-art-type-detail.php?editid=1. The manipulation of the argument arttype leads to sql injection.
This vulnerability was named CVE-2025-2643. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-2642 | PHPGurukul Art Gallery Management System 1.0 edit-art-product-detail.php?editid=2 editide/sprice/description sql injection
3 months ago
A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/edit-art-product-detail.php?editid=2. The manipulation of the argument editide/sprice/description leads to sql injection.
This vulnerability is uniquely identified as CVE-2025-2642. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-2641 | PHPGurukul Art Gallery Management System 1.0 edit-artist-detail.php?editid=1 Name sql injection
3 months ago
A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-artist-detail.php?editid=1. The manipulation of the argument Name leads to sql injection.
This vulnerability is handled as CVE-2025-2641. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com
Submit #519781: PHPGurukul Medical Card Generation System V1.0 XSS Vulnerability [Accepted]
3 months ago
Submit #519781 / VDB-300665
liuhao17328
Submit #519780: PHPGurukul Doctor Appointment Management System V1.0 SQL Injection [Accepted]
3 months ago
Submit #519780 / VDB-300664
liuhao17328