| CVE-2021-35387 | ALTO8.8 | Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php. | 28/10/2022 |
| CVE-2022-42206 | MEDIO5.4 | PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php. | 21/10/2022 |
| CVE-2022-42205 | MEDIO5.4 | PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php. | 21/10/2022 |
| CVE-2022-40943 | CRÍTICO9.8 | Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via bwdate-report-ds.php file. | 30/09/2022 |
| CVE-2022-35156 | CRÍTICO9.8 | Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php.. | 30/09/2022 |
| CVE-2022-35155 | MEDIO6.1 | Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter. | 30/09/2022 |
| CVE-2022-40944 | CRÍTICO9.8 | Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file. | 30/09/2022 |
| CVE-2022-40925 | ALTO7.2 | Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" module in the background management system. | 26/09/2022 |
| CVE-2022-40924 | ALTO7.2 | Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in the background management system. | 26/09/2022 |
| CVE-2022-40932 | ALTO7.2 | In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system. | 22/09/2022 |
| CVE-2022-36198 | CRÍTICO9.8 | Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.php, and buspassms/admin/edit-pass-detail.php | 22/08/2022 |
| CVE-2020-23466 | MEDIO5.4 | Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field. | 19/08/2022 |
| CVE-2022-33075 | MEDIO5.4 | A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors. | 05/07/2022 |
| CVE-2022-31897 | MEDIO6.1 | SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?msg=. | 29/06/2022 |
| CVE-2022-31384 | CRÍTICO9.8 | Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php. | 16/06/2022 |
| CVE-2022-31383 | CRÍTICO9.8 | Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php. | 16/06/2022 |
| CVE-2022-31382 | CRÍTICO9.8 | Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php. | 16/06/2022 |
| CVE-2022-31914 | MEDIO5.4 | Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24. | 16/06/2022 |
| CVE-2022-30930 | MEDIO4.3 | Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF). | 14/06/2022 |
| CVE-2021-4232 | MEDIO6.1 | A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. It is possible to launch the attack remotely. | 26/05/2022 |