PT-2022-20083

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /sns/admin/?page=user/manage user&id= endpoint. The id parameter is vulnerable to injection attacks. Thi...

CVE-2022-30379: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...

CVE-2022-30417: Improper Neutralization of Special Elements used in an SQL Command

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manageuser&id=...

PT-2022-20108

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The Covid-19 Travel Pass Management System is affected by a SQL Injection issue. This issue can be exploited via the ctpms/admin/?page=user/manage user&id= endpoint, specifically...

PT-2022-19942

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /cms/admin/?page=user/manage user&id= endpoint. This allows for potential manipulation of database queries. Recommendation...

PT-2022-19810

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /mtms/admin/?page=user/manage user&id= endpoint. This allows for potential exploitation by injecting malicious SQL code. The id...

CVE-2022-29980: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manageuser&id=...

PT-2022-18761

Name of the Vulnerable Software and Affected Versions Purchase Order Management System version 1.0 Description A remote code execution issue was found in the Purchase Order Management System, which can be exploited via the "/purchase order/admin/?page=user" API endpoint. Recommendations For...

PT-2022-15712

Name of the Vulnerable Software and Affected Versions Hospital Patient Record Management System version 1.0 Description The issue is related to an access control problem in the hprms/admin/?page=user/list endpoint of the Hospital Patient Record Management System, allowing attackers to escalate...

CVE-2022-22854: Missing Authorization

An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing and editing the user list...