PT-2022-20700

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /ocwbs/classes/Master.php API endpoint, specifically when the f parameter is set to delete booking...

PT-2022-20995

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL injection via the /rdms/classes/Master.php?f=delete incident endpoint. This allows for potential manipulation of database queries. No information is provided abou...

PT-2022-21008

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows deletion of any file via the "/ofrs/classes/Master.php?f=delete img" API endpoint. Recommendations For Online Fire Reporting System version 1.0, restrict access to the...

PT-2022-21011

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the API endpoint "/ofrs/classes/Master.php?f=delete request". Recommendations For Online Fire Reporting System versi...

PT-2022-21004

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue allows deletion of any file via the /simple chat bot/classes/Master.php API endpoint with the f parameter set to delete img. Recommendations For ChatBot App with Suggestion version...

PT-2022-20994

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /rdms/classes/Master.php?f=delete respondent type API endpoint. This allows for potential manipulation of database...

PT-2022-20702

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue is related to SQL Injection via the /ocwbs/classes/Master.php?f=delete service endpoint. This allows for potential exploitation. Recommendations For Online Car Wash Booking Syste...

PT-2022-20992

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the /rdms/classes/Master.php?f=delete team endpoint. This allows for potential manipulation of database queries. No information is provided about th...

PT-2022-21012

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the /ofrs/classes/Master.php?f=delete team API endpoint, specifically through the f parameter. This could potentially lead to unauthorized data access ...

PT-2022-20993

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the /rdms/classes/Master.php?f=delete report API endpoint. This allows for potential manipulation of database queries. No information is provided...

CVE-2022-31946: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=deleteteam...

CVE-2022-31346: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deleteservice...

PT-2022-21013

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ofrs/classes/Master.php?f=delete inquiry" API endpoint. Recommendations For Online Fire Reporting System versi...

PT-2022-20123

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue is related to Cross Site Scripting XSS via the "/bcms/classes/Master.php?f=save court rental" API endpoint. This allows for potential malicious script injection. No informati...

PT-2022-20128

Name of the Vulnerable Software and Affected Versions Water-billing-management-system version 1.0 Description The issue concerns SQL Injection via the "/wbms/classes/Master.php?f=delete client" API endpoint, specifically affecting the id variable. This allows for potential manipulation of databas...

PT-2022-20130

Name of the Vulnerable Software and Affected Versions Automotive Shop Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /asms/classes/Master.php?f=delete product API endpoint. Recommendations For Automotive Shop Management Syst...

PT-2022-20125

Name of the Vulnerable Software and Affected Versions Automotive Shop Management System version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the API endpoint "/asms/classes/Master.php?f=save product" using the name variable. Recommendations...

PT-2022-20352

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The Covid-19 Travel Pass Management System is affected by a SQL Injection issue. This issue can be exploited via the /ctpms/classes/Master.php?f=update application status API...

PT-2022-20353

Name of the Vulnerable Software and Affected Versions Room-rent-portal-site version 1.0 Description The issue is related to Cross Site Scripting XSS via the API endpoint "/rrps/classes/Master.php" with parameters f set to "save category" and vehicle name. This allows for potential malicious scrip...

CVE-2022-30838: Improper Neutralization of Special Elements used in an SQL Command

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=updateapplicationstatus...