CVE-2022-30381: Undefined Security Weakness

Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggersmerch/classes/Master.php?f=deleteimg...

CVE-2022-30386: Improper Neutralization of Special Elements used in an SQL Command

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletefeatured...

CVE-2022-30391: Improper Neutralization of Special Elements used in an SQL Command

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletecategory...

CVE-2022-30392: Improper Neutralization of Special Elements used in an SQL Command

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletesubcategory...

CVE-2022-30375: Incorrect Default Permissions

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...

CVE-2022-30370: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargotype...

CVE-2022-30372: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargo...

PT-2022-20087

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /vloggers merch/classes/Master.php API endpoint, specifically when the f parameter is set to delete featured. Recommendations For...

PT-2022-19816

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection via the /cms/classes/Master.php?f=delete invoice endpoint. This allows for potential manipulation of database queries. No information is provided about th...

PT-2022-19818

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection via the /cms/classes/Master.php?f=delete service endpoint. This allows for potential manipulation of database queries. No information is provided about th...

PT-2022-19941

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /cms/classes/Master.php?f=delete designation API endpoint. This allows for potential manipulation of database queries...

PT-2022-19947

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the Master.php file, specifically through the delete category function. The estimated number of potentially...

CVE-2022-29988: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete...

CVE-2022-29989: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletebooking...

CVE-2022-29750: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...

CVE-2022-29749: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...

CVE-2022-29985: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletecategory...

CVE-2022-28417: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

PT-2022-18762

Name of the Vulnerable Software and Affected Versions Purchase Order Management System version 1.0 Description A SQL injection issue was found in the Purchase Order Management System. The vulnerability can be exploited via the /purchase order/classes/Master.php API endpoint, specifically through...

PT-2022-18767

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/reps/classes/Master.php?f=delete amenity" API endpoint. Recommendations For Simple Real Estate Portal...