Skip to content
OpenAdvisories

Archive

23 March 2025

Vulnerabilities first published on this day (UTC), newest first.

22 results · Clear filters · Feed

  • High 7.3

    PHPGurukul Online Security Guards Hiring System bwdates-reports-details.php sql injection

    A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql in…

  • High 7.3

    PHPGurukul Bank Locker Management System search-locker-details.php sql injection

    A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /search-locker-details.php. The manipulation of the argument searchinput leads to…

  • High 7.3

    Project Worlds Online Time Table Generator index.php sql injection

    A vulnerability was found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /staff/index.php. The manipulation of the argument e leads to sql injection. The attack may be initi…

  • High 7.3

    Project Worlds Online Time Table Generator index.php sql injection

    A vulnerability has been found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument e leads to sql injection. The attack can be ini…

  • High 7.3

    Project Worlds Online Time Table Generator index.php sql injection

    A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument e leads to sql injection. It is possible to initiate …

  • High 7.3

    PHPGurukul Online Security Guards Hiring System search-request.php sql injection

    A vulnerability, which was classified as critical, has been found in PHPGurukul Online Security Guards Hiring System 1.0. Affected by this issue is some unknown functionality of the file /search-request.php. The manipulation of the argument searchdata leads t…

  • High 7.3

    projectworlds Apartment Visitors Management System front.php sql injection

    A vulnerability classified as critical was found in projectworlds Apartment Visitors Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /front.php. The manipulation of the argument rid leads to sql injection. The att…

  • High 7.3

    PHPGurukul Zoo Management System login.php sql injection

    A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack …

  • High 7.3

    SourceCodester AC Repair and Services System Users.php delete_users sql injection

    A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function save_users/delete_users of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible …

  • High 7.8

    Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

    Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

  • High 7.3

    SourceCodester AC Repair and Services System manage_service.php sql injection

    A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manage_service.php. The manipulation of the argument ID leads to sql injection. It is p…

  • High 8.2

    nossrf Server-Side Request Forgery (SSRF)

    Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.

  • High 7.5

    Apache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENT

    Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' parameter. Specifying 'NameScope.DESCENDENT' promises that "an exception is thrown if the resolved fil…

  • High 7.3

    PHPGurukul Doctor Appointment Management System check-appointment.php sql injection

    A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown code of the file /check-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack…

  • High 7.3

    PHPGurukul Art Gallery Management System view-enquiry-detail.php sql injection

    A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/view-enquiry-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to i…

  • High 7.3

    PHPGurukul Art Gallery Management System search.php sql injection

    A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulation of the argument Search leads to sql injection. The attack …

  • High 7.3

    PHPGurukul Art Gallery Management System admin-profile.php sql injection

    A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads …

  • High 7.3

    PHPGurukul Art Gallery Management System add-art-product.php sql injection

    A vulnerability was found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/add-art-product.php. The manipulation of the argument arttype leads to sql injection. The attac…

  • High 7.3

    PHPGurukul Art Gallery Management System edit-art-type-detail.php sql injection

    A vulnerability has been found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-art-type-detail.php?editid=1. The manipulation of the argument arttype leads to sql inje…

  • High 7.3

    PHPGurukul Art Gallery Management System edit-art-product-detail.php sql injection

    A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/edit-art-product-detail.php?editid=2. The manipulation of the argument editide/sprice/description lea…

  • High 7.3

    PHPGurukul Art Gallery Management System edit-artist-detail.php sql injection

    A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-artist-detail.php?editid=1. The manipulation of the argument Name l…

  • High 7.3

    PHPGurukul Doctor Appointment Management System appointment-bwdates-reports-details.php sql injection

    A vulnerability was found in PHPGurukul Doctor Appointment Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /doctor/appointment-bwdates-reports-details.php. The manipulation of the argument fromdate/toda…