CVE-2022-32365

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/manage_field.php?id=. The vulnerability is confirmed across multiple catalogs (NVD, Red Hat, CNVD/CNNVD) with descriptions stating that an attacker can execute illegal SQL commands to steal sensitive database data. ...

CVE-2022-32366

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/viewfield.php?id=...

CVE-2022-32366

CVE-2022-32366 concerns Product Show Room Site v1.0, where a SQL injection vulnerability exists in the PHP file /psrs/admin/fields/view_field.php?id=. Connected records consistently describe SQL injection in this endpoint, indicating improper handling of the id parameter that allows arbitrary SQL...

CVE-2022-32367

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/viewinquiry&id=...

CVE-2022-32367

Product Show Room Site v1.0 is explicitly identified as vulnerable to SQL injection via the parameter in the URL /psrs/admin/?page=inquiries/view_inquiry&id=. The CVE entry notes an SQLi vulnerability without providing patch details; the root cause is described by mirrored records as an unsafe SQ...

PT-2022-21265

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/fields/view field.php" endpoint, specifically through the id variable. This allows for potential unauthorized access and manipulation of...

CVE-2022-32353: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/managefieldorder.php?id=...

PT-2022-21262

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/categories/view category.php" API endpoint, specifically through the id variable. This allows for potential unauthorized access and manipulati...

CVE-2022-32367: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/viewinquiry&id=...

CVE-2022-32359: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deletecategory...

CVE-2022-32362: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/managecategory.php?id=...

CVE-2022-32358: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteinquiry...

CVE-2022-32365: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/managefield.php?id=...

PT-2022-21256

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/categories/manage field order.php?id=" API endpoint, where the id variable is vulnerable. This allows for potential unauthorized access and...

PT-2022-21266

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the /psrs/admin/?page=inquiries/view inquiry&id= endpoint. This allows for potential data manipulation. No information is provided about the estimated number o...

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/?page=user/manageuser&id= page. SQL injection problem. No detailed vulnerability details are...

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/viewfield.php?id=page. SQL injection problem, an attacker can use this vulnerabilit...

CVE-2022-32364: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manageproduct&id=...

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/categories/viewcategory.php?id = A SQL injection issue exists in the page, which can be exploited ...

PT-2022-21257

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/?page=user/manage user&id=" endpoint. This allows for potential exploitation. No information is provided about the estimated number of...