ATM Consulting dolibarr_module_quicksupplierprice SQL注入漏洞

dolibarrmodulequicksupplierprice is an open source application from ATM Consulting. Allows to quickly add supplier prices directly from the supplier order . ATM Consulting dolibarrmodulequicksupplierprice 1.1.6 and earlier versions have a SQL injection vulnerability that stems from a problem with...

PT-2023-21711 · Soko · Soko

Name of the Vulnerable Software and Affected Versions: Soko versions prior to 1.0.2 Description: The issue affects the package search handlers, Search and SearchFeed, implemented in pkg/app/handler/packages/search.go, allowing unauthenticated attackers to execute arbitrary SQL queries on...

PT-2023-17038 · Sourcecodester · Sourcecodester Alphaware Simple E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester Alphaware Simple E-Commerce System version 1.0 Description: A critical issue affects some unknown functionality of the file function/edit customer.php. The manipulation of the argument firstname/mi/lastname with the input a'...

PT-2023-20841 · Unknown · Alphaware - Simple E-Commerce System

Name of the Vulnerable Software and Affected Versions: Alphaware - Simple E-Commerce System version 1.0 Description: The issue is related to a SQL injection that can directly issue instructions to the background database system. This is possible via the "/alphaware/details.php?id" API endpoint,...

Rebuild SQL注入漏洞

Rebuild is a highly customizable enterprise management system. An SQL injection vulnerability exists in Rebuild 3.2.3 and earlier versions, which stems from a problem with the function queryListOfConfig in the file /admin/robot/approval/list, where manipulation of the parameter q can lead to sql...

CVE-2023-1494

A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-1483

A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the...

PT-2023-17020 · Unknown · Xiaobingby Teacms

Name of the Vulnerable Software and Affected Versions: XiaoBingBy TeaCMS versions up to 2.0.2 Description: A critical vulnerability has been found in XiaoBingBy TeaCMS, affecting the file /admin/getallarticleinfo. The manipulation of the searchInfo argument leads to sql injection. The attack can ...

PT-2023-17031 · Ibos · Ibos

Name of the Vulnerable Software and Affected Versions: IBOS version 4.5.5 Description: A critical issue has been found in the software. It affects an unknown function of the file ApiController.php. The manipulation of the emailids argument leads to sql injection. This issue can be exploited...

CVE-2023-1455

A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file admin/ajax.php?action=login2 of the component Login Page. The manipulation of the argument email with the input abc%40qq.com' AND SELECT 9110 FR...

CVE-2023-1441

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/courses/viewcourse.php of the component GET Parameter Handler. The manipulation of the argument i...

SourceCodester Automatic Question Paper Generator System SQL注入漏洞

Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which originates from a SQL injection vulnerability found in...

PT-2023-17006 · Sourcecodester · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical vulnerability was found in the Report Handler component of the system. The issue affects an unknown functionality of the file...

PT-2023-17009 · WordPress · Wp Popup Banners

Name of the Vulnerable Software and Affected Versions: WP Popup Banners plugin for WordPress versions up to, and including, 1.2.5 Description: The issue allows for SQL Injection via the banner id parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Canteen Management System version 1.0, which stems from a problem in the file createuser.php, where manipulation of the parameter uemail can lead to...

WordPress plugin WP Popup Banners SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP Popup...

CVE-2023-27250

Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php...

PT-2023-20798 · Unknown · Kirin Fortress Machine

Name of the Vulnerable Software and Affected Versions: Kirin Fortress Machine version 1.7-2020-0610 Description: A SQL Injection issue allows attackers to execute arbitrary code via the "/admin.php?controller=admin commonuser" API endpoint, specifically through the controller parameter. This...

Online Book Store SQL注入漏洞

Online Book Store is an online bookstore by the individual developer Arvin Arandilla. A security vulnerability exists in Online Book Store Project v1.0, which originates from a SQL injection vulnerability in /bookstore/bookPerPub.php...

CVE-2023-1416

A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument socialfacebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...