Security Intel Hub 332+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

Clear filters

CVSS 4.7

SQL Injection in Online Course Registration Site V1.0 (coursecode param)

github.com · 2025-10-07

### Critical Vulnerability Information #### Affected Product - **Product Name**: Online Course Registration Site V1.0 - **Vendor Homepage**: https://code-projects.org/online-course-registration-site-u…

CVSS 7.3

SQL Injection in Hostel Management System V1.0 via id parameter

github.com · 2025-09-29

### Key Information #### Affected Product - **Product Name**: Hostel Management System - **Version**: V1.0 - **Link**: https://itsourcecode.com/free-projects/php-projects/hostel-management-system-proj…

CVSS 7.3

Simple Scheduling System V1.0 SQL Injection in addtime.php

github.com · 2025-09-29

### Key Information #### Affected Product - Simple Scheduling System #### Vulnerable File - /schedulingsystem/addtime.php #### Version - V1.0 #### Vulnerability Type - SQL Injection #### Submitter - s…

CVSS 7.3

Simple Scheduling System V1.0 SQL Injection in addsubject.php

github.com · 2025-09-29

### Key Information #### Affected Product - Simple Scheduling System #### Vulnerable File - /schedulingsystem/addsubject.php #### Version - V1.0 #### Vulnerability Type - SQL Injection #### Root Cause…

CVSS 7.3

SQL Injection in Simple Scheduling System addfaculty.php

github.com · 2025-09-29

### Critical Vulnerability Information #### Affected Product - Simple Scheduling System #### Affected File - /schedulingsystem/addfaculty.php #### Vulnerability Type - SQL Injection #### Root Cause - …

CVSS 7.3

SQL Injection in Hostel Management System V1.0 with POC

github.com · 2025-09-24

### Critical Vulnerability Information #### Affected Product - **Product Name**: Hostel Management System V1.0 - **Affected File**: justines/index.php - **Version**: V1.0 #### Vulnerability Type - **T…

CVSS 2.4

Stored XSS in Responsive Blog Site (blogs_view.php)

github.com · 2025-09-05

### Key Information #### 1. Affected Product - **Product Name**: Responsive Blog Site - **Vendor Homepage**: https://code-projects.org/responsive-blog-site-in-php-with-source-code/ #### 2. Vulnerable …

CVSS 2.4

Stored XSS in POS Pharmacy System products.php

github.com · 2025-09-05

### Key Information #### 1. Affected Product - POS Pharmacy System #### 2. Vulnerable File - /pharma/pharma/main/products.php #### 3. Vulnerability Type - Cross-Site Scripting (XSS) #### 4. Root Cause…

CVSS 3.5

Fruit Shop Management System V1.0 Stored XSS Vulnerability and PoC

github.com · 2025-09-04

### Key Information #### 1. Affected Product - **Product Name**: Fruit Shop Management System - **Version**: V1.0 - **Vulnerable File**: /fruit/main/products.php #### 2. Vulnerability Type - **Type**:…

CVSS 6.3

Mobile Shop Management System V1.0 Unrestricted File Upload Vulnerability

github.com · 2025-09-04

### Key Information #### 1. Affected Product - **Product Name**: Mobile Shop Management System - **Version**: V1.0 - **Vulnerable File**: /osmsmo/AddNewProduct.php #### 2. Vulnerability Type - **Type*…

CVSS 7.3

SQL Injection in log_query.php with POC

github.com · 2025-09-02

### Key Information #### Vulnerability Description - **Vulnerability Type**: SQL Injection - **Affected File**: log_query.php - **Cause**: Due to improper input validation and lack of parameterized qu…

CVSS 7.3

SQL Injection in HRIS login_attendance2.php with Time-Based and Error-Based POC

github.com · 2025-09-02

### Key Information #### Vulnerability Description - **Vulnerability Type**: SQL Injection - **Affected File**: `login_attendance2.php` - **Problematic Parameters**: `employee_id` and `date` - **Cause…

CVSS 7.3

SQL Injection in login.php with Authentication Bypass POC

github.com · 2025-09-02

### Key Information - **Vulnerability Type**: SQL Injection - **Affected File**: `login.php` - **Description**: - The username and password parameters in `login.php` are vulnerable to SQL injection at…

CVSS 7.3

SQL Injection in HRIS log_query12.php with Time-based POC

github.com · 2025-09-02

From this webpage screenshot, the following key information about the vulnerability can be obtained: ### Vulnerability Overview - **System Name**: Human Resource Integrated System - **Vulnerability Ty…

CVSS 7.3

SQL Injection in login_timeee.php via emp_id parameter

github.com · 2025-09-01

### Key Information #### Vulnerability Description - **Vulnerability Type**: SQL Injection - **Affected File**: `login_timeee.php` - **Issue**: The `emp_id` parameter is retrieved without any filterin…

CVSS 4.3

SQL Injection in Student Information Management System V1.0 (login.php)

github.com · 2025-08-30

### Key Information #### Affected Product - **Product Name**: Student Information Management System - **Version**: V1.0 - **Vendor Homepage**: https://itsourcecode.com/free-projects/php-projects/sc-co…

CVSS 6.3

Simple Cafe Ordering System PHP SQL Injection Vulnerability and POC

github.com · 2025-08-16

### Critical Vulnerability Information #### Affected Product - **Name**: Simple Cafe Ordering System In PHP With Source Code V1.0 - **Link**: [Vendor Homepage](https://code-projects.org/simple-cafe-or…

CVSS 7.3

SQL Injection in Online Medicine Guide V1.0 via /browsemdcn.php

github.com · 2025-08-16

### Key Information #### Affected Product - Online Medicine Guide #### Vulnerable File - /browsemdcn.php #### Version - V1.0 #### Vulnerability Type - SQL Injection #### Root Cause - In the `/browsemd…

CVSS 7.3

Job Diary V1.0 SQL Injection in /user-apply.php

github.com · 2025-08-15

### Critical Vulnerability Information #### Affected Product - **Name**: Job Diary - **Homepage**: https://code-projects.org/job-diary-in-php-css-javascript-and-mysql-free-download/ #### Affected Vers…

CVSS 6.3

eBlog Site V1.0 Arbitrary File Upload Leading to RCE Analysis

github.com · 2025-08-13

### Critical Vulnerability Information #### Vulnerability Overview - **Product Name**: eBlog Site - **Version**: V1.0 - **Vulnerability Type**: Arbitrary File Upload Leading to Arbitrary Code Executio…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 332+