5 matches found
CVE-2025-13257: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has be...
CVE-2025-11041: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit h...
CVE-2022-32010: Improper Neutralization of Special Elements used in an SQL Command
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/user/index.php?view=edit&id=...
PT-2022-21038
Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection via the "/eris/admin/user/index.php?view=edit&id=" endpoint. The id variable is vulnerable to SQL injection attacks. No information is provided abo...
PT-2022-20695
Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue allows for SQL Injection via the /ordering/admin/user/index.php?view=edit&id= API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized access o...