WordPress plugin WpStickyBar SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Xibo CMS SQL注入漏洞

Xibo CMS is an open source content management system from Xibo Digital Signage. Xibo CMS suffers from a SQL injection vulnerability that originates from allowing authenticated users to obtain and modify arbitrary data from the database by injecting specially crafted values into the API...

PT-2024-38184 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /lot details.php. The manipulation of the id argument leads to SQL injection...

itsourcecode Alton Management System SQL注入漏洞

itsourcecode Alton Management System is an online restaurant management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Alton Management System, which stems from an SQL injection vulnerability in the rcode function of the /reservationstatus.php page...

PT-2024-38183 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /view model.php. The manipulation of the id argument leads to SQL injectio...

CVE-2024-7202

The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...

CVE-2024-7201

The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...

Complaints Report Management System SQL注入漏洞

Complaints Report Management System is a Complaints Report Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Complaints Report Management System version 1.0, which is caused by a SQL injection vulnerability in the id parameter of the...

Lost and Found Information System 安全漏洞

Lost and Found Information System is a lost and found information system by oretnom23 individual developer. A security vulnerability exists in Lost and Found Information System version 1.0, which originates from a SQL injection vulnerability that allows remote attackers to elevate privileges via...

Complaints Report Management System 安全漏洞

Complaints Report Management System is a Complaints Report Management System by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of the Complaints Report Management System, which stems from an SQL injection vulnerability in the username parameter of the...

CVE-2024-7165

A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewpayment.php. The manipulation of the argument efid leads to sql injection. The attack may be initiated remotely. The exploit has been...

SourceCodester School Fees Payment System SQL注入漏洞

SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the id parameter of the /manageuser.php file...

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus version 5717 and prior versions. An attacker can exploit this vulnerability to perform SQL injection attacks...

PT-2024-38087 · Unknown · Md-Mafujul-Hasan Online-Payroll-Management-System

Name of the Vulnerable Software and Affected Versions: MD-MAFUJUL-HASAN Online-Payroll-Management-System affected versions not specified Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /shift viewmore.php. The manipulation of the id...

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus version 5717 and prior versions. An attacker can exploit this vulnerability to perform SQL injection attacks...

PT-2024-38076 · Forip Tecnologia · Forip Tecnologia Administração Pabx

Name of the Vulnerable Software and Affected Versions: ForIP Tecnologia Administração PABX versions 1.x Description: A critical issue has been found in the Authentication Form component, affecting the /login file. The manipulation of the usuario argument leads to sql injection. This issue can be...

PT-2024-38067 · Unknown · Itsourcecode Tailoring Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Tailoring Management System version 1.0 Description: A critical issue affects some unknown functionality of the file expcatadd.php. The manipulation of the id or title argument leads to SQL injection. The attack can be launched...

WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin ListingPro versions = 2.9.4...

PT-2024-28152 · Unknown · Ukrsolution Barcode Scanner With Inventory & Order Manager

Name of the Vulnerable Software and Affected Versions: UkrSolution Barcode Scanner with Inventory & Order Manager versions 1.6.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows f...

PT-2024-28196 · Unknown · Directorypress

Name of the Vulnerable Software and Affected Versions: DirectoryPress versions 3.6.10 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations:...