PT-2022-20992

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the /rdms/classes/Master.php?f=delete team endpoint. This allows for potential manipulation of database queries. No information is provided about th...

PT-2022-21013

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ofrs/classes/Master.php?f=delete inquiry" API endpoint. Recommendations For Online Fire Reporting System versi...

PT-2022-21012

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the /ofrs/classes/Master.php?f=delete team API endpoint, specifically through the f parameter. This could potentially lead to unauthorized data access ...

PT-2022-20994

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /rdms/classes/Master.php?f=delete respondent type API endpoint. This allows for potential manipulation of database...

PT-2022-20700

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /ocwbs/classes/Master.php API endpoint, specifically when the f parameter is set to delete booking...

PT-2022-21011

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the API endpoint "/ofrs/classes/Master.php?f=delete request". Recommendations For Online Fire Reporting System versi...

PT-2022-20993

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the /rdms/classes/Master.php?f=delete report API endpoint. This allows for potential manipulation of database queries. No information is provided...

CVE-2022-31346: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deleteservice...

PT-2022-21004

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue allows deletion of any file via the /simple chat bot/classes/Master.php API endpoint with the f parameter set to delete img. Recommendations For ChatBot App with Suggestion version...

PT-2022-20710

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue is related to SQL Injection via the /ocwbs/classes/Master.php?f=get vehicle service endpoint. This allows for potential exploitation. Recommendations For Online Car Wash Booking...

PT-2022-21008

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows deletion of any file via the "/ofrs/classes/Master.php?f=delete img" API endpoint. Recommendations For Online Fire Reporting System version 1.0, restrict access to the...

PT-2022-20995

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL injection via the /rdms/classes/Master.php?f=delete incident endpoint. This allows for potential manipulation of database queries. No information is provided abou...

CVE-2022-31946: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=deleteteam...

PT-2022-20702

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue is related to SQL Injection via the /ocwbs/classes/Master.php?f=delete service endpoint. This allows for potential exploitation. Recommendations For Online Car Wash Booking Syste...

Woocommerce Cross-site Scripting via Additional tax classes field when taxes are enabled

When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users such as admin to use XSS payloads even when the unfilteredhtml is disabled...

GHSA-MP46-7X6Q-F28M Woocommerce Cross-site Scripting via Additional tax classes field when taxes are enabled

When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users such as admin to use XSS payloads even when the unfilteredhtml is disabled...

Deserialization of Untrusted Data in Spring Batch

When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with global default typing enabled which means...

PT-2022-20130

Name of the Vulnerable Software and Affected Versions Automotive Shop Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /asms/classes/Master.php?f=delete product API endpoint. Recommendations For Automotive Shop Management Syst...

PT-2022-20353

Name of the Vulnerable Software and Affected Versions Room-rent-portal-site version 1.0 Description The issue is related to Cross Site Scripting XSS via the API endpoint "/rrps/classes/Master.php" with parameters f set to "save category" and vehicle name. This allows for potential malicious scrip...

CVE-2022-30462: Improper Neutralization of Input During Web Page Generation

Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...