60 matches found
Sql injection
A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-accepted-appointment.php. The manipulation of the argument contactno leads to sql injection. The attack m...
Campcodes Beauty Salon Management System SQL注入漏洞
Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes. A SQL injection vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which originates from an unknown function in /admin/forgot-password.php, which causes a sql injection via the...
CVE-2023-3882: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-accepted-appointment.php. The manipulation of the argument contactno leads to sql injection. The attack m...
CVE-2023-3881: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack can be launched...
PT-2023-26606 · Unknown · Campcodes Beauty Salon Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical vulnerability was found in the system, affecting an unknown functionality of the file /admin/forgot-password.php. The manipulation of the contactno argument leads to...
PT-2023-26611 · Unknown · Campcodes Beauty Salon Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /admin/edit-accepted-appointment.php. The manipulation of the contactno argument...
Campcodes Beauty Salon Management System SQL注入漏洞
Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes. A SQL injection vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which originates from an unknown function in /admin/edit-accepted-appointment.php, which results in a sql...
CVE-2023-1950: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file password-recovery.php of the component Password Recovery. The manipulation of the argument emailid/contactno leads to...
CVE-2021-46110
Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters...
CVE-2021-46110
Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters...
CVE-2021-46110
Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters...
Sql injection
Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters...
CVE-2021-46110
Online Shopping Portal (version 3.1) contains multiple time-based SQL injection vulnerabilities in the email and contactno parameters. This is evidenced by PT-2022-12571, which specifies affected version 3.1 and exploitation via those parameters, with recommended mitigation to restrict access to ...
CVE-2021-46110
Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters...
PT-2022-12571 · Unknown · Online Shopping Portal
Name of the Vulnerable Software and Affected Versions: Online Shopping Portal version 3.1 Description: The issue concerns multiple time-based SQL injection vulnerabilities. These vulnerabilities can be exploited via the email and contactno parameters. Recommendations: For Online Shopping Portal...
CVE-2021-46110: Improper Neutralization of Special Elements used in an SQL Command
Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters...
CVE-2021-44245
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...
CVE-2021-44245
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...
CVE-2021-44245
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...
CVE-2021-44245: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...