CVE-2025-32831

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateProjectUserRights' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

CVE-2025-3696

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /search/searchstock. php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. Th...

CVE-2025-3685

A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /editfpatient.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method LockTcmSettings, which can be exploited by an attacker to bypass...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, UnlockProjectUserRights, which can be exploited by an attacker to bypass authorization...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateConnectionVariableArchivingBuffering, which can be exploited by an attacker to bypa...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that stems from an SQL injection in the GetTraces method, which can be exploited by an attacker to bypass authorization controls a...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the UpdateWebServerGatewaySettings method, which can be exploited by an attacker to cause...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the ExportCertificate method, which can be exploited by an attacker to bypass...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method CreateProject, which can be exploited by an attacker to bypass...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateConnectionVariablesWithImport, which can be exploited by an attacker to bypass...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the CreateBackup method, which can be exploited by an attacker to bypass authorization...

SourceCodester Web-based Pharmacy Product Management System Injection Vulnerability

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. An injection vulnerability exists in SourceCodester Web-based Pharmacy Product Management System version 1.0, which results from SQL injection due to incorrect...

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateSmtpSettings, which can be exploited by an attacker to bypass...

SourceCodester Music Class Enrollment System Security Vulnerabilities

SourceCodester Music Class Enrollment System is an open source music class enrollment system from SourceCodester. A security vulnerability exists in SourceCodester Music Class Enrollment System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter ID in...

VulnCheck KEV: CVE-2024-13979

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

WordPress plugin Accredible Certificates & Open Badges has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Accredible Certificates & Ope...

Online Fire Reporting System search.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the searchdata parameter of the /admin/search.php file. An attacker can us...

Library-Manager security vulnerabilities

Library-Manager is a simple library management system by Horvey Personal Developer. A security vulnerability exists in Library-Manager version 1.0, which stems from a SQL injection in BookController.class.php...