PT-2022-22451

Name of the Vulnerable Software and Affected Versions Pharmacy Management System version 1.0 Description A SQL injection issue was found in the Pharmacy Management System. The vulnerability can be exploited via the id parameter at the "edituser.php" endpoint. Recommendations For Pharmacy Manageme...

CVE-2022-34952: Improper Neutralization of Special Elements used in an SQL Command

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser.php...

CVE-2022-2577: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument id with the input -2'%20UNION%20select%2011,user,333,444--+ leads to sql injection. The attack can b...

CVE-2020-36033

SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php...

Sql injection

SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php...

CVE-2020-36033

CVE-2020-36033 is a confirmed SQL injection vulnerability affecting SourceCodester Water Billing System 1.0 . The flaw is exploitable via the id parameter to edituser.php , as reported in multiple connected records. The NVD listing shows a CVSS v3.1 base score of 9.8 (CRITICAL) with network acces...

PT-2021-11908

Name of the Vulnerable Software and Affected Versions: SourceCodester Water Billing System version 1.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter to the "edituser.php" endpoint. Recommendations: For SourceCodester Water Billing...

CVE-2020-36033: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php...

PT-2021-10499

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue is related to a SQL injection vulnerability. It arises from the default task edituser.php files failing to properly filter the csa to user parameter. This allows remote attackers to...

CVE-2019-11592

WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, or the offset parameter to admin/edituser.php...

CVE-2019-11592

CVE-2019-11592 affects WeBid 1.2.2 and is a reflected XSS vulnerability. The issue is triggered via user-supplied input in the id parameter of admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, and via the offset parameter in admin/edituser.php....

PT-2019-12402

Name of the Vulnerable Software and Affected Versions WeBid version 1.2.2 Description The issue is related to reflected XSS. It can be triggered via the id parameter to endpoints such as "admin/deletenews.php", "admin/editbannersuser.php", "admin/editfaqscategory.php", or "admin/excludeuser.php",...

Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability

Product & Service Introduction: =============================== Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time is Developer Friendly, it offers a simple...

phpCollab CMS 2.5 Cross Site Request Forgery

Document Title: =============== phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1911 Release Date: ============= 2016-08-17 Vulnerability Laboratory ID VL-ID: ====================================...

phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability

Document Title: =============== phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1911 Release Date: ============= 2016-08-17 Vulnerability Laboratory ID VL-ID: ====================================...

Sql injection

Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the 1 sectionID parameter to admin/managersection.php, 2 userID parameter to admin/edituser.php, 3 username parameter to admin/admin.php, or 4 title parameter to...

powermovielist 0.14b (sql/xss) Multiple Vulnerabilities

No description provided by source. =============================================================================================== Found : brainpillow Dork : PowerMovieList 0.14 Beta Copyright Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

AlstraSoft SMS Text Messaging Enterprise 2.0 admin/edituser.php userid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25022/info SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

TTS Software Time Tracking Software 3.0 Edituser.PHP Access Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16731/info Time Tracking Software is prone to an access-validation vulnerability. This issue is due the application's failure to limit access to administrative sections of the application. An attacker can exploit this...

myBloggie 2.1.2/2.1.3 edituser.php errormsg Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17048/info MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...