CVE-2025-2677: High SQL Injection in PHPGurukul Bank Locker
SQL injection via editid in changeidproof.php affects PHPGurukul Bank Locker 1.0. No fix is named, so restrict access and review the query code.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
SQL injection via editid in changeidproof.php affects PHPGurukul Bank Locker 1.0. No fix is named, so restrict access and review the query code.
SQL injection via sadminusername in add-subadmin.php affects PHPGurukul Bank Locker 1.0. No fix is named, so restrict access and review the query code.
SQL injection in Bank Locker Management System 1.0 through lockerprice. No fixed version is listed, so bind your queries and limit who can reach it.
SQL injection in Bank Locker Management System 1.0 through pagetitle. No fixed version is listed, so bind your queries and limit who can reach it.
High severity improper authorization in Azure Playwright could let an unauthorized attacker elevate privileges over a network. Read the Microsoft guide.
SQL injection in Online Security Guards Hiring System 1.0 via fromdate and todate. No fix is listed, so bind the inputs and keep the app off the internet.
Critical heap buffer overflow in Exiv2 0.28.0 to 0.28.4 when writing metadata to a crafted image. Upgrade to 0.28.5; the advisory lists no workaround.
Critical SQL injection in WeGIA historico_paciente.php (CVSS 9.8). Fixed in 3.2.14; the advisory lists no workarounds, so upgrade and review access logs.
Critical OS command injection in WeGIA gerenciar_backup.php (CVSS 9.8). Fixed in 3.2.14. No workaround is listed, so upgrade and check access logs.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.