Latest CVE Feed
-
7.4
CVSS31CVE-2025-1724
Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a hardcoded sensitive token.... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2381
A vulnerability classified as critical has been found in PHPGurukul Curfew e-Pass Management System 1.0. Affected is an unknown function of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. It is possible... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2362
A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The atta... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2387
A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=add_to_cart. The manipulation of the argument pid leads to sql injection. I... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2379
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /create-pass.php. The manipulation of the argument visname leads to sql injection. The ... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2382
A vulnerability classified as critical was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to sql in... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2383
A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/search.php. The manipulation of the argument searchdata lead... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2360
A vulnerability classified as critical was found in D-Link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is the function SetUpnpSettings of the file /HNAP1/ of the component UPnP Service. The manipulation of the argument SOAPAction leads to i... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2353
A vulnerability, which was classified as critical, was found in VAM Virtual Airlines Manager up to 2.6.2. Affected is an unknown function of the file /vam/index.php of the component HTTP GET Parameter Handler. The manipulation of the argument ID/registry_... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2378
A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been classified as critical. This affects an unknown part of the file /download-medical-cards.php. The manipulation of the argument searchdata leads to sql injection. It is... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2380
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injectio... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2386
A vulnerability was found in PHPGurukul Local Services Search Engine Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /serviceman-search.php. The manipulation of the argument location leads to sql in... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2391
A vulnerability classified as critical was found in code-projects Blood Bank Management System 1.0. This vulnerability affects unknown code of the file /admin/admin_login.php of the component Admin Login Page. The manipulation leads to sql injection. The ... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2351
A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The at... Read more
Affected Products :- Published: Mar. 16, 2025
- Modified: Mar. 16, 2025
-
7.3
CVSS31CVE-2025-2372
A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the file /password-recovery.php of the component Password Recovery Page. The manipulation of the argum... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2376
A vulnerability has been found in viames Pair Framework up to 1.9.11 and classified as critical. Affected by this vulnerability is the function getCookieContent of the file /src/UserRemember.php of the component PHP Object Handler. The manipulation of the... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2385
A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument userEmail/userPassword leads to sql injection. The attack can be in... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2359
A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B05_20181207. Affected is the function SetDDNSSettings of the file /HNAP1/ of the component DDNS Service. The manipulation of the argument SOAPAction leads to improper authoriza... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.3
CVSS31CVE-2025-2388
A vulnerability was found in Keytop 路内停车收费系统 2.7.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /saas/commonApi/park/getParks of the component API. The manipulation leads to improper authenticat... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025
-
7.1
CVSS31CVE-2025-25612
FS Inc S3150-8T2F prior to version S3150-8T2F_2.2.0D_135103 is vulnerable to Cross Site Scripting (XSS) in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious JavaScript into the "Time Range Name" f... Read more
Affected Products :- Published: Mar. 17, 2025
- Modified: Mar. 17, 2025