CVE-2023-43144

CVE-2023-43144 Описание Assets Management System 1.0 подвержен SQL-инъекции через параметр id в delete.php PoC sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch Обзор кода delete.php ?php include 'core/init.php'; $id = $GET'id'; deletedata$con,$id...

EUVD-2023-47563

Malicious code in bioql PyPI...

CVE-2023-43144

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php...

Malware in seagroup-assets-management-system

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3916 Malicious code in seagroup-assets-management-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c44bc2e3fe919ef26fcd2d1f0c35594c222160c51fff19083d9be40017cc2689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-43144

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php...

CVE-2023-43144

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php...

Sql injection

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php...

CVE-2023-43144

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php...

CVE-2023-43144

CVE-2023-43144 affects the Projectworldsl Assets-management-system-in-php 1.0. The issue is a SQL Injection in delete.php via the id parameter, where the value is directly interpolated into a query without validation or sanitization, enabling arbitrary SQL execution. Connected sources (Red Hat, N...

CVE-2023-43144: Improper Neutralization of Special Elements used in an SQL Command

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php...

PT-2023-28716

Name of the Vulnerable Software and Affected Versions Projectworldsl Assets-management-system-in-php version 1.0 Description The issue is related to SQL Injection via the id parameter in the "delete.php" endpoint. This allows for potential exploitation. Recommendations For Projectworldsl...