CVE-2021-41932: Improper Neutralization of Special Elements used in an SQL Command

A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which can result in complete database compromise, gaining information about other users, unauthorized access to audit data etc...

PT-2022-11509

Name of the Vulnerable Software and Affected Versions TeamMate+ Audit version 28.0.19.0 Description A blind SQL injection vulnerability in the search form allows any authenticated user to create malicious SQL injections. This can result in complete database compromise, gaining information about...

CVE-2021-44095

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database...

CVE-2021-44097

EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via Addmessage.php. This allows a remote attacker to compromise Application SQL database...

CVE-2021-44095

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database...

CVE-2021-44098

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expenseaction.php. This allows a remote attacker to compromise Application SQL database...

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. hospital Management System v1.0 is vulnerable to a SQL injection vulnerability that stems from a SQL injection issue. A remote attacker...

CVE-2021-44096

The CVE-2021-44096 entry concerns EGavilan Media User-Registration-and-Login-System-With-Admin-Panel version 1.0. It is vulnerable to SQL Injection via the profile_action - update_user endpoint, allowing a remote attacker to compromise the application’s SQL database. The connected documents consi...

CVE-2021-44097

The CVE-2021-44097 entry concerns EGavilan Media’s Contact-Form-With-Messages-Entry-Management 1.0, vulnerable to SQL Injection through Addmessage.php. The root cause is improper handling of SQL queries in that entry point, enabling a remote attacker to compromise the application’s SQL database. ...

CVE-2021-44098

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php, allowing a remote attacker to compromise the application SQL database. The vulnerability is described across multiple sources as an SQL injection flaw in the Expense-Management-System, with no rem...

CVE-2021-44097: Improper Neutralization of Special Elements used in an SQL Command

EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via Addmessage.php. This allows a remote attacker to compromise Application SQL database...

PT-2022-11985

Name of the Vulnerable Software and Affected Versions EGavilan Media User-Registration-and-Login-System-With-Admin-Panel version 1.0 Description The issue allows a remote attacker to compromise the application's SQL database via SQL Injection in the profile action - update user function. This can...

PT-2022-11986

Name of the Vulnerable Software and Affected Versions EGavilan Media Contact-Form-With-Messages-Entry-Management version 1.0 Description The issue allows a remote attacker to compromise the application's SQL database via SQL Injection in the Addmessage.php file. This can be exploited by sending...

CVE-2021-44098: Improper Neutralization of Special Elements used in an SQL Command

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expenseaction.php. This allows a remote attacker to compromise Application SQL database...

PT-2022-11984

Name of the Vulnerable Software and Affected Versions ProjectWorlds Hospital Management System version 1.0 Description A SQL injection issue exists in the login page, allowing a remote attacker to compromise the application's SQL database. Recommendations For ProjectWorlds Hospital Management...

CVE-2022-28347

A flaw was found in the Django package, leading to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely...

PT-2022-28292

Name of the Vulnerable Software and Affected Versions cuyz/valinor versions 0.5.0 through 0.6.x Description The issue arises when upgrading from an older system to a newer one, which can lead to the wrong constructor being picked. A security concern is present, similar to a known issue in Rails...

Online Diagnostic Lab Management System 1.0 - SQL Injection Vulnerability

Exploit Title: Online Diagnostic Lab Management System 1.0 - SQL Injection Unauthenticated Exploit Author: Himash Vendor Homepage: https://www.sourcecodester.com/php/15129/online-diagnostic-lab-management-system-php-free-source-code.html Software Link:...

Design/Logic Flaw

In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution...

CVE-2021-45411: Unrestricted Upload of File with Dangerous Type

In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution...