CVE-2022-29747

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manageinvoice= // Leak place --- id...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteclient...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manageservice.php?id=...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/viewclient&id=...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manageclient&id=...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manageinvoice&id= // Leak place --- id...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/viewinvoice&id=...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manageuser&id=...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete...

CVE-2022-29747

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manageinvoice&id= // Leak place --- id...

CVE-2022-29748

Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manageclient&id=...

CVE-2022-29748

Affected software: Simple Client Management System 1.0. The vulnerability is a SQL injection in the CMS path cms/admin?page=client/manage_client&id= (also described as manage_client&id=). Root cause: lack of input validation/external input handling in the affected parameter, enabling arbitrary SQ...

CVE-2022-29749

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...

CVE-2022-29750

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...

CVE-2022-29750

The vulnerability CVE-2022-29750 affects Simple Client Management System 1.0. It enables SQL Injection through /cms/classes/Master.php?f=delete_service due to insufficient validation of the id parameter, allowing potentially unauthorized access to database data. The entry indicates high-severity ...

CVE-2022-29751

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteclient...

CVE-2022-29751

CVE-2022-29751 affects Simple Client Management System 1.0. The vulnerability is an SQL injection in the delete_client path (/cms/classes/Master.php?f=delete_client) caused by lack of input validation, enabling arbitrary SQL execution and potential data disclosure/ modification. Root cause stated...

CVE-2022-29981

CVE-2022-29981 affects Simple Client Management System 1.0. The vulnerability is an SQL Injection via the endpoint /cms/classes/Users.php?f=delete, stemming from lack of input validation of the id parameter in the POST request. Public documents consistently describe this as a SQL injection affect...