Aggregator

CVE-2025-1856 | Codezips Gym Management System 1.0 gen_invoice.php id sql injection

VulDB Recent Entries
9 months 2 weeks ago
A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/gen_invoice.php. The manipulation of the argument id leads to sql injection. This vulnerability is handled as CVE-2025-1856. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-1855 | PHPGurukul Online Shopping Portal 2.1 /product-details.php quality/price/value/name/summary/review sql injection

VulDB Recent Entries
9 months 2 weeks ago
A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. This vulnerability is known as CVE-2025-1855. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-1854 | Codezips Gym Management System 1.0 del_member.php name sql injection

VulDB Recent Entries
9 months 2 weeks ago
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/del_member.php. The manipulation of the argument name leads to sql injection. This vulnerability is traded as CVE-2025-1854. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-1853 | Tenda AC8 16.03.34.06 Parameter /goform/SetIpMacBind sub_49E098 list stack-based overflow

VulDB Recent Entries
9 months 2 weeks ago
A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub_49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2025-1853. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-1852 | Totolink EX1800T 9.1.0cu.2112_B20220316 /cgi-bin/cstecgi.cgi loginAuth password buffer overflow

VulDB Recent Entries
9 months 2 weeks ago
A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. This vulnerability was named CVE-2025-1852. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad