2 matches found
CVE-2024-6417: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleteuser. The manipulation of the argument id leads to sql injection. The attack may be launched...
7.5CVSS6.4AI score0.00453EPSS
SaveExploits1References1
CVE-2022-46952: Improper Neutralization of Special Elements used in an SQL Command
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deleteuser...
7.2CVSS5.8AI score0.00821EPSS
SaveExploits1References3
20