CVE-2022-28077

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Admin panel via the $GET's' parameter...

Cross site scripting

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Admin panel via the $GET'page' parameter...

Cross site scripting

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Admin panel via the $GET's' parameter...

Sql injection

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows attackers to bypass authentication...

Sql injection

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication...

CVE-2022-28078

CVE-2022-28078 affects Home Owners Collection Management v1, with a reflected XSS in the Admin panel via the $_GET['page'] parameter. The root cause is lack of input validation/output encoding for user-supplied data, allowing arbitrary JavaScript execution in the browser. An exploit exists public...

CVE-2022-28077

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Admin panel via the $GET's' parameter...

CVE-2022-28077

CVE-2022-28077 affects Home Owners Collection Management v1. The vulnerability is a reflected XSS in the Admin panel via the $_GET['s'] parameter, caused by lack of input validation/filtering and output of unsanitized data. Impact described as client-side JavaScript execution in affected sessions...

CVE-2022-29009

CVE-2022-29009 applies to Cyber Cafe Management System Project v1.0 (CCMS). The NVD/Nuclei and related CVE records describe multiple SQL injection vulnerabilities in the Admin panel, exploitable via the username and password parameters, which can allow an attacker to bypass authentication and pot...

CVE-2022-29009

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication...

CVE-2022-29007

Dairy Farm Shop Management System 1.0 is affected by multiple SQL injection flaws in the Admin panel’s username and password parameters, allowing authentication bypass. The Nuclei template and related reports describe exploitation that could enable data access, modification, and unauthorized admi...

CVE-2022-29007

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows attackers to bypass authentication...

CVE-2022-29006

Summary (CVE-2022-29006) : Directory Management System 1.0 contains multiple SQL injection vulnerabilities in the Admin panel via the username and password parameters, enabling an attacker to bypass authentication. The Nuclei template and related entries describe exploitation that could lead to s...

PT-2022-19360 · Unknown · Directory Management System

Name of the Vulnerable Software and Affected Versions: Directory Management System version 1.0 Description: The issue allows attackers to bypass authentication due to multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. Recommendations: For Directory...

Dairy Farm Shop Management System SQL注入漏洞

Dairy Farm Shop Management System is a dairy farm store management system.A SQL injection vulnerability exists in Dairy Farm Shop Management System version 1.0, which stems from multiple SQL injection vulnerabilities in the username and password parameters in the administration panel. An attacker...

PT-2022-19361 · Unknown · Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: Dairy Farm Shop Management System version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication. Recommendations: Fo...

PT-2022-19363 · Unknown · Cyber Cafe Management System Project

Name of the Vulnerable Software and Affected Versions: Cyber Cafe Management System Project version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication. Recommendations:...

CVE-2022-28568

Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored...

Sourcecodesterk Doctor Appointment System 代码问题漏洞

Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. It provides an appointment function. A security vulnerability exists in Sourcecodesterk Doctor Appointment System version 1.0, which stems from a remote command execution vulnerability in a file that is upload...

CVE-2022-23904

Rainworx Auctionworx 3.1R2 is vulnerable to a Cross-Site Request Forgery CSRF attack that allows an authenticated user to upgrade his account to admin and gain access to the auctionworx admin control panel. This vulnerability affects AuctionWorx Enterprise and AuctionWorx: Events Edition...