PT-2022-21039

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "/eris/admin/applicants/index.php?view=view&id=" endpoint. The id variable is vulnerable to injection attacks. No...

CVE-2022-32007: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=...

CVE-2022-32011: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...

CVE-2022-32027: Improper Neutralization of Special Elements used in an SQL Command

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page=managecar&id=...

CVE-2022-32017: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...

CVE-2022-32010: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/user/index.php?view=edit&id=...

PT-2022-20694

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue allows for SQL Injection via the "/ordering/admin/category/index.php?view=edit&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized da...

PT-2022-20692

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue is related to SQL Injection. It can be exploited via the "/ordering/admin/stockin/index.php?view=edit&id=" endpoint. The id variable is vulnerable to SQL injection attacks...

PT-2022-20689

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue is related to SQL Injection, which can be exploited via the "/ordering/index.php?q=products&id=" endpoint. The id variable is vulnerable to SQL injection attacks...

CVE-2022-31335: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=...

PT-2022-20695

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue allows for SQL Injection via the /ordering/admin/user/index.php?view=edit&id= API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized access o...

PT-2022-20690

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue is related to SQL Injection. It affects the /ordering/admin/products/index.php?view=edit&id= API endpoint, where the id parameter is vulnerable. Recommendations For version...

CVE-2022-31338: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=...

CVE-2022-31337: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...

PT-2022-20331

Name of the Vulnerable Software and Affected Versions Simple Bus Ticket Booking System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/SimpleBusTicket/index.php" API endpoint. Recommendations For Simple Bus Ticket Booking System version 1.0, update the...

CVE-2022-30817: Improper Neutralization of Special Elements used in an SQL Command

Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php...

CVE-2022-31328: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=...

CVE-2022-31327: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=...

CVE-2022-30352: Improper Neutralization of Special Elements used in an SQL Command

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...

PT-2022-20072

Name of the Vulnerable Software and Affected Versions phpABook version 0.9i Description The issue arises from insufficient sanitization of user-supplied data in the auth user parameter, leading to SQL Injection. This occurs in the index.php script. Recommendations For phpABook version 0.9i,...