Vraj404 vulnerabilities
We track 5 vulnerabilities in Vraj404 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2026.
Latest Vraj404 vulnerabilities
- 7.3 High severity
Criminal-Management-System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqli_error of the file Officers/addOfficer.php of the component Officer Registration Form. Performing a manipulation
- 7.3 High severity
Criminal-Management-System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqli_query of the file Officers/searchOff.php of the component Search Page. Such manipulat
- 7.3 High severity
Criminal Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of the file home.php of the component Submission Form. This manipulation of the argu
- 7.3 High severity
Criminal-Management-System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can b
- 7.3 High severity
Criminal-Management-System: Improper Access Control
A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move_uploaded_file of the file home.php. The manipulation of the argument my_img leads to unrestricted upload. Remote