PT-2022-20981

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the API endpoint "/ofrs/classes/Master.php". Recommendations For Online Fire Reporting System version 1.0...

PT-2022-21235

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection via the "/ffos/classes/Master.php?f=delete category" API endpoint. This allows for potential manipulation of database queries. No information is provided about...

PT-2022-21233

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/ffos/classes/Master.php?f=delete menu" API endpoint. This allows for potential unauthorized access and manipulation of database conten...

CVE-2022-32332: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletecategory...

PT-2022-21260

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/psrs/classes/Master.php?f=delete category" API endpoint. This allows for potential manipulation of database queries. No informati...

PT-2022-21251

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete doctor endpoint. This allows for potential unauthorized access and manipulation of...

PT-2022-21259

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/classes/Master.php?f=delete inquiry" API endpoint. This allows for potential manipulation of database queries. No information is provided about the...

PT-2022-21253

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete room type API endpoint. This allows for potential unauthorized access and...

CVE-2022-32359: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deletecategory...

CVE-2022-32348: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deletedoctor...

CVE-2022-32350: Improper Neutralization of Special Elements used in an SQL Command

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deleteroomtype...

CVE-2022-32330: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...

PT-2022-21255

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete patient admission API endpoint. This allows for potential unauthorized access and...

PT-2022-21250

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete room API endpoint. This allows for potential unauthorized access and manipulation ...

PT-2022-21023

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete court. This allows for potential manipulation of database...

CVE-2022-31990: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deleteproduct...

CVE-2022-31991: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deletecourt...

PT-2022-21022

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete product. This allows...

PT-2022-21025

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the /bcms/classes/Master.php?f=delete service API endpoint. This allows for potential manipulation of database queries. No information is provided...

PT-2022-20710

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue is related to SQL Injection via the /ocwbs/classes/Master.php?f=get vehicle service endpoint. This allows for potential exploitation. Recommendations For Online Car Wash Booking...