Aggregator

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The identification of this vulnerability is CVE-2025-4929. The attack may be initiated remotely. Furthermore, there is an exploit available.

Submit #579678 / VDB-309495

A vulnerability was found in projectworlds Online Lawyer Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /save_lawyer_edit_profile.php. The manipulation leads to sql injection. This vulnerability was named CVE-2025-4928. The attack can be initiated remotely. Furthermore, there is an exploit available. Multiple parameters might be affected.

Submit #579676 / VDB-309494

Submit #579686 / VDB-303131

Submit #579481 / VDB-309493

A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/between-dates-application-report.php. The manipulation of the argument fromdate/todate leads to sql injection. This vulnerability is uniquely identified as CVE-2025-4927. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Submit #579468 / VDB-309492

Submit #579467 / VDB-309491

Submit #579313 / VDB-309490

A vulnerability was found in PHPGurukul Car Rental Project 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/post-avehical.php. The manipulation of the argument img1/img2/img3/img4/img5 leads to unrestricted upload. This vulnerability is handled as CVE-2025-4926. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #579462 / VDB-303132

Submit #579446 / VDB-303133

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /expense-monthwise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. This vulnerability is known as CVE-2025-4925. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #579300 / VDB-309489

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /user_void_transaction.php. The manipulation of the argument order_id leads to sql injection. This vulnerability is traded as CVE-2025-4924. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /user_delivery_update.php. The manipulation of the argument uploaded_file_cancelled leads to unrestricted upload. The identification of this vulnerability is CVE-2025-4923. The attack may be initiated remotely. Furthermore, there is an exploit available.

Submit #579279 / VDB-303134

Submit #579234 / VDB-298818

Submit #579163 / VDB-309488