CVE-2019-7488

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

389-ds-base: expired password was still allowed to access the database

A vulnerability was found in the 389 Directory Server. This issue allows expired passwords to access the database, causing improper authentication...

PT-2022-22221

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the grade parameter at the "/school/view/timetable insert form.php" API endpoint. This allows for potential unauthorized access to...

PT-2022-21274

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the /school/model/get timetable.php endpoint, specifically through the id parameter. This allows for potential unauthorized access to...

PT-2022-21041

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the /eris/admin/category/index.php endpoint, specifically when the view parameter is set to edit and the id parameter is...

PT-2022-21001

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/rdms/admin/incidents/view incident.php" API endpoint, specifically through the id variable. This allows for potential...

PT-2022-12630

Name of the Vulnerable Software and Affected Versions Projectworlds Online Examination System version 1.0 Description An SQL Injection issue exists via the eid parameter in the "account.php" file. This allows for potential unauthorized access to database information. Recommendations For...

CVE-2019-1010104

The CVE-2019-1010104 entry concerns the TechyTalk Quick Chat WordPress plugin. A SQL Injection vulnerability exists in the plugin’s Quick-chat.php, specifically where the like_escape function is used (line 399), making the database susceptible to crafted Ajax requests. Multiple connected records ...

PT-2017-14928

Name of the Vulnerable Software and Affected Versions Responsive Events And Movie Ticket Booking Script version 3.2.1 Description The issue is related to SQL Injection, which can be exploited via the findcity.php q parameter. This allows for potential unauthorized access to database information...