Archive
11 October 2025
Vulnerabilities first published on this day (UTC), newest first.
13 results · Clear filters · Feed
-
High 7.3
SourceCodester Best Salon Management System add_invoice.php sql injection
A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add_invoice.php. Performing manipulation of the argument ServiceId results in sql injection. Remote exploitation of the att…
-
High 7.3
SourceCodester Best Salon Management System edit-appointment.php sql injection
A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be…
-
High 7.3
code-projects E-Banking System POST Parameter register.php sql injection
A security vulnerability has been detected in code-projects E-Banking System 1.0. This affects an unknown function of the file /register.php of the component POST Parameter Handler. The manipulation of the argument username/password leads to sql injection. It…
-
High 7.3
projectworlds Online Ordering Food System all-orders.php sql injection
A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possib…
-
High 7.3
SourceCodester Online Student Result System login.php sql injection
A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be in…
-
High 7.3
Campcodes Online Apartment Visitor Management System forgot-password.php sql injection
A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /forgot-password.php. This manipulation of the argument email causes sql injection. It is possible to initiate the attack …
-
High 7.3
code-projects E-Commerce Website delete_order_details.php sql injection
A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/delete_order_details.php. Executing manipulation of the argument order_id can lead to sql injection. The attack can be execu…
-
High 8.8
GSheetConnector For Gravity Forms <= 1.3.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to authorization bypass in versions less than, or equal to, 1.3.27. This is due to a missing capability check on the 'install_plugin' function. This makes it possible for authenticated a…
-
High 8.4
Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may …
-
High 7.3
Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may…
-
High 7.8
Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect serv…
-
High 7.5
In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of pr…
-
High 7.5
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of servic…