EUVD-2022-39437

Malicious code in bioql PyPI...

PT-2022-23595 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the bookId parameter at the "/admin/delete.php" API endpoint. Recommendations: For Library...

CVE-2008-3302

CVE-2008-3302 describes an SQL injection in BilboBlog 0.2.1. The vulnerability exists in admin/delete.php when magic_quotes_gpc is disabled, allowing remote authenticated administrators to execute arbitrary SQL commands via the num parameter. Public references confirm the affected component and c...