CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- phpgurukul complaint management systemPHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the...4.6 Medium
- kashipara school management systemkashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the...6.1 Medium
- phpgurukul online shopping portalPHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary,...6.5 Medium
- phpgurukul online shopping portalPHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in...6.5 Medium
- phpgurukul online shopping portalPHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter...6.5 Medium
- phpgurukul online shopping portalPHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the...5.4 Medium
- phpgurukul online shopping portalPHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid,...6.5 Medium
- phpgurukul online shopping portalPHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in...9.8 Critical
- phpgurukul complaint management systemPHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and...6.5 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and...6.5 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the...6.1 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and...6.5 Medium
- kashipara ecommerce websiteKashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in...6.5 Medium
- kashipara ecommerce websiteKashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username,...6.5 Medium
- kashipara ecommerce websiteKashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in...6.5 Medium
- phpgurukul small crmPHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in...6.5 Medium
- phpgurukul small crmPHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in...6.1 Medium
- phpgurukul small crmPHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in...6.5 Medium
- phpgurukul small crmPHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change...6.5 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System add_librarian.php sql injection5.3 Medium
- shsuishang shopsuite modulithshopshsuishang ShopSuite ModulithShop RSA/OAuth2/Database hard-coded credentials6.9 Medium
- datax-web project datax-webWeiYe-Jing datax-web sql injection5.3 Medium
- datax-web project datax-webWeiYe-Jing datax-web Job triggerJob access control5.3 Medium
- jinher oaJiusi OA OfficeServer unrestricted upload5.3 Medium
- pamzey patients waiting area queue management systemSourceCodester Patients Waiting Area Queue Management System api_patient_schedule.php sql injection6.9 Medium
- phpgurukul tourism management systemPHPGurukul Tourism Management System user-bookings.php sql injection6.9 Medium
- shsuishang shopsuite modulithshopshsuishang ShopSuite ModulithShop JwtAuthenticationFilter.java JwtAuthenticationFilter path traversal5.3 Medium
- code-projects student information systemcode-projects Student Information System editprofile.php cross site scripting5.1 Medium
- code-projects student information systemcode-projects Student Information System register.php cross site scripting5.3 Medium
- code-projects student information systemcode-projects Student Information System editprofile.php sql injection5.3 Medium
- code-projects student information systemcode-projects Student Information System register.php sql injection6.9 Medium
- code-projects student information systemcode-projects Student Information System index.php sql injection6.9 Medium
- code-projects student information systemcode-projects Student Information System searchquery.php sql injection6.9 Medium
- bdtask isshue, isshue multi store ecommerce shopping cart solution +1 moreBdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow5.3 Medium
- bdtask flight booking softwareBdtask Flight Booking Software Edit Profile edit unrestricted upload5.3 Medium
- code-projects inventory management systemitsourcecode Inventory Management System LogSignModal.PHP sql injection6.9 Medium
- ameliabooking booking for appointments and events calendar – ameliaBooking for Appointments and Events Calendar – Amelia <= 1.2.35 - Unauthenticated SQL Injection via search7.5 High
- code-projects inventory management systemitsourcecode Inventory Management System index.php sql injection5.3 Medium
- code-projects inventory management systemitsourcecode Inventory Management System login.php sql injection6.9 Medium
- code-projects inventory management systemitsourcecode Inventory Management System index.php sql injection5.3 Medium
- code-projects inventory management systemitsourcecode Inventory Management System index.php sql injection6.9 Medium
- projectsendprojectsend File Editor/Custom Download Aliases cross site scripting5.1 Medium
- intelbras unnitiIntelbras UnniTI usuarios.xml credentials storage6.9 Medium
- code-projects inventory management systemitsourcecode Inventory Management System index.php sql injection5.1 Medium
- bestfeng oa git freebestfeng oa_git_free WorkflowPredefineController.java updateWriteBack xml external entity reference5.3 Medium
- fantasticlbp hotels serverFantasticLBP Hotels Server hotelList.php sql injection5.3 Medium
- code-projects simple cafe ordering systemcode-projects Simple Cafe Ordering System addmem.php sql injection6.9 Medium
- code-projects simple cafe ordering systemcode-projects Simple Cafe Ordering System add_to_cart cross site scripting5.1 Medium
- code-projects simple cafe ordering systemcode-projects Simple Cafe Ordering System login.php sql injection6.9 Medium
- janobe farm management systemSourceCodester Farm Management System exposure of information through directory listing6.9 Medium
- Show moreLoading…