PT-2022-20123

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue is related to Cross Site Scripting XSS via the "/bcms/classes/Master.php?f=save court rental" API endpoint. This allows for potential malicious script injection. No informati...

PT-2022-20130

Name of the Vulnerable Software and Affected Versions Automotive Shop Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /asms/classes/Master.php?f=delete product API endpoint. Recommendations For Automotive Shop Management Syst...

PT-2022-20353

Name of the Vulnerable Software and Affected Versions Room-rent-portal-site version 1.0 Description The issue is related to Cross Site Scripting XSS via the API endpoint "/rrps/classes/Master.php" with parameters f set to "save category" and vehicle name. This allows for potential malicious scrip...

PT-2022-20352

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The Covid-19 Travel Pass Management System is affected by a SQL Injection issue. This issue can be exploited via the /ctpms/classes/Master.php?f=update application status API...

CVE-2022-29304: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...

PT-2022-19528

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns SQL Injection via the "/classes/master.php?f=delete Facility" endpoint. This allows for potential manipulation of database queries. No information is provided abou...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deleteinventory to conduct SQL injection attack...

CVE-2022-30384

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteinventory...

CVE-2022-30386

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletefeatured...

CVE-2022-30387

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=payorder...

PT-2022-20087

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /vloggers merch/classes/Master.php API endpoint, specifically when the f parameter is set to delete featured. Recommendations For...

PT-2022-20105

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /ctpms/classes/Master.php API endpoint, specifically when the f parameter is set to delete application...

PT-2022-20090

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=delete sub category endpoint. Recommendations For Merchandise Online Store...

PT-2022-20080

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue allows for file deletion via the /sns/classes/Master.php?f=delete img API endpoint. This endpoint is vulnerable to exploitation, potentially leading to unauthorized...

PT-2022-20086

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=delete order API endpoint. Recommendations For Merchandise Online Store version...

PT-2022-20077

Name of the Vulnerable Software and Affected Versions Air Cargo Management System version 1.0 Description The issue concerns SQL Injection via the /acms/classes/Master.php?f=delete cargo API endpoint. This allows for potential manipulation of database queries. No information is provided about the...

PT-2022-20088

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=pay order endpoint, specifically through the f parameter set to pay order...

PT-2022-20075

Name of the Vulnerable Software and Affected Versions Air Cargo Management System version 1.0 Description The issue concerns SQL Injection vulnerability via the "/acms/classes/Master.php?f=delete cargo type" API endpoint. This allows for potential unauthorized access and manipulation of data. No...

PT-2022-20092

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /vloggers merch/classes/Master.php?f=delete cart endpoint, specifically through the f parameter set to delete cart. Recommendations...

PT-2022-20102

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The issue allows for file deletion via the "/ctpms/classes/Master.php?f=delete img" API endpoint. This endpoint is vulnerable to file deletion attacks. Recommendations For Covid-19...