PT-2022-21004

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue allows deletion of any file via the /simple chat bot/classes/Master.php API endpoint with the f parameter set to delete img. Recommendations For ChatBot App with Suggestion version...

PT-2022-20700

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /ocwbs/classes/Master.php API endpoint, specifically when the f parameter is set to delete booking...

PT-2022-20130

Name of the Vulnerable Software and Affected Versions Automotive Shop Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /asms/classes/Master.php?f=delete product API endpoint. Recommendations For Automotive Shop Management Syst...

PT-2022-20105

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /ctpms/classes/Master.php API endpoint, specifically when the f parameter is set to delete application...

PT-2022-20092

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /vloggers merch/classes/Master.php?f=delete cart endpoint, specifically through the f parameter set to delete cart. Recommendations...

PT-2022-20086

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=delete order API endpoint. Recommendations For Merchandise Online Store version...

PT-2022-20087

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /vloggers merch/classes/Master.php API endpoint, specifically when the f parameter is set to delete featured. Recommendations For...

PT-2022-20088

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=pay order endpoint, specifically through the f parameter set to pay order...

PT-2022-19811

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the Master.php file, specifically through the f parameter set to delete fee. Recommendations For Money Transfer...

PT-2022-18768

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The vulnerability can be exploited via the /reps/classes/Master.php API endpoint, specifically when the f paramet...

PT-2022-19004

Name of the Vulnerable Software and Affected Versions Car Driving School Managment System version 1.0 Description A SQL injection issue was found in the Car Driving School Managment System. The vulnerability can be exploited via the /cdsms/classes/Master.php API endpoint, specifically when the f...

PT-2022-19009

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

PT-2022-19007

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

PT-2022-19008

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

PT-2022-18762

Name of the Vulnerable Software and Affected Versions Purchase Order Management System version 1.0 Description A SQL injection issue was found in the Purchase Order Management System. The vulnerability can be exploited via the /purchase order/classes/Master.php API endpoint, specifically through...

PT-2022-19002

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The vulnerability can be exploited via the /reps/classes/Users.php API endpoint, specifically when the f paramete...

PT-2022-19005

Name of the Vulnerable Software and Affected Versions Car Driving School Management System version 1.0 Description A SQL injection issue was found in the Car Driving School Management System. The vulnerability can be exploited via the /cdsms/classes/Master.php API endpoint, specifically through t...

PT-2021-22057

Name of the Vulnerable Software and Affected Versions: Border Loading Bar WordPress plugin versions up to and including 1.0.1 Description: The issue allows attackers to inject arbitrary web scripts via Reflected Cross-Site Scripting, utilizing the f and t parameters found in the...

Border Loading Bar <= 1.0.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts...

CVE-2021-20115

A reflected cross-site scripting vulnerability exists in TCExam = 14.8.3. The paths provided in the f, d, and dir parameters in tcefilemanager.php were not properly validated and could cause reflected XSS via the unsanitized output of the path supplied. An attacker could craft a malicious link...