CVE-2022-34590: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS/admin.php...

CVE-2022-34876

SQL Injection vulnerability in admin interface /vicidial/admin.php of VICIdial via modifyemailaccounts, accessrecordings, and agentcallemail parameters allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make i...

PT-2022-22411

Name of the Vulnerable Software and Affected Versions VICIdial versions prior to 3555 Description The issue is related to a SQL Injection vulnerability in the admin interface of VICIdial, specifically affecting the /vicidial/admin.php endpoint through the modify email accounts, access recordings,...

Sql injection

A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-admin/admin.php. The manipulation of the argument orderby/order with the input ASC%2cselectfromselectsleep2a leads to sql injection Blind. It is possible to...

CVE-2017-20103 Kama Click Counter Plugin admin.php Blind sql injection

A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-admin/admin.php. The manipulation of the argument orderby/order with the input ASC%2cselectfromselectsleep2a leads to sql injection Blind. It is possible to...

CVE-2017-20103

CVE-2017-20103 describes a blind SQL injection in the Kama Click Counter Plugin (up to version 3.4.8) affecting wp-admin/admin.php via the order_by/order parameter (ASC, (select sleep(2))). The vulnerability can be exploited remotely and the public exploit has been disclosed. Upgrading to version...

CVE-2017-20103: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-admin/admin.php. The manipulation of the argument orderby/order with the input ASC%2cselectfromselectsleep2a leads to sql injection Blind. It is possible to...

PT-2022-7976

Name of the Vulnerable Software and Affected Versions Kama Click Counter Plugin versions up to 3.4.8 Description A critical vulnerability has been found in the Kama Click Counter Plugin. This issue affects an unknown part of the file wp-admin/admin.php. The manipulation of the order by/order...

CVE-2021-40678

In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batchmanager&mode=unit...

PT-2022-11298

Name of the Vulnerable Software and Affected Versions Piwigo version 11.5.0 Description The issue is related to a persistent cross-site scripting in the single mode function. This occurs through the /admin.php?page=batch manager&mode=unit API endpoint, specifically affecting the mode parameter...

PT-2022-20763

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for XSS in the return page parameter of the gacl/admin/acl admin.php file. Recommendations For LibreHealth EHR Base version 2.0.0, avoid using the return page parameter in the...

PT-2022-20761

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for XSS in the acl id parameter of the "gacl/admin/acl admin.php" API endpoint. Recommendations For LibreHealth EHR Base version 2.0.0, avoid using the acl id parameter in the...

PT-2022-20762

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for XSS in the gacl/admin/acl admin.php action. Recommendations For LibreHealth EHR Base version 2.0.0, consider disabling access to the gacl/admin/acl admin.php action until a...

CVE-2020-20971

Cross Site Request Forgery CSRF vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index...

CVE-2020-20971

Cross Site Request Forgery CSRF vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index...

PT-2022-8635

Name of the Vulnerable Software and Affected Versions PbootCMS version 2.0.3 Description A Cross Site Request Forgery CSRF issue exists, allowing unauthorized actions to be performed. The issue is exploited via the "/admin.php?p=/User/index" API endpoint. Recommendations For PbootCMS version 2.0....

CVE-2020-20971: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index...

Piwigo SQL Injection Vulnerability (CNVD-2022-43223)

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A SQL injection vulnerability exists in Piwigo version 11.5.0, which stems from a lack of validation of the id parameter in admin.php...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45400)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter in /admin.php/singer/admin/singer/del fo...