62 matches found
CVE-2023-2097: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be launched...
CVE-2023-2074: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...
CVE-2023-1960: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. The attack may be initiated remotel...
CVE-2023-1958: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /classes/Master.php?f=deletesubcategory. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...
CVE-2023-1593: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generator System 1.0. This issue affects some unknown processing of the file classes/Master.php?f=saveclass. The manipulation of the argument description leads to cross site scripting...
CVE-2023-1292: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vulnerability affects the function deleteclient of the file classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. T...
CVE-2022-46947: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...
CVE-2022-46949: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletehelmet...
CVE-2022-46946: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletebrand...
CVE-2022-46127: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...
CVE-2022-44277: Improper Neutralization of Special Elements used in an SQL Command
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=deleteproduct...
CVE-2022-44280: Improper Limitation of a Pathname to a Restricted Directory
Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...
CVE-2022-44378: Improper Neutralization of Special Elements used in an SQL Command
Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=deletemechanic...
CVE-2022-44379: Improper Neutralization of Special Elements used in an SQL Command
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteservice...
CVE-2022-44402: Improper Neutralization of Special Elements used in an SQL Command
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deletetransaction...
CVE-2022-3868: Improper Neutralization
A vulnerability classified as critical has been found in SourceCodester Sanitization Management System. Affected is an unknown function of the file /php-sms/classes/Master.php?f=savequote. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. Th...
CVE-2022-43062: Improper Neutralization of Special Elements used in an SQL Command
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteappointment...
CVE-2022-43068: Improper Neutralization of Special Elements used in an SQL Command
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...
Merchandise Online Store SQL注入漏洞
Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deleteinventory to conduct SQL injection attack...
