SourceCodester Online Discussion Forum Site SQL Injection Vulnerability

SourceCodester Online Discussion Forum Site is an application from SourceCodester, Inc. An online discussion forum. A SQL injection vulnerability exists in Online Discussion Forum Site version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...

SourceCodester Online Discussion Forum Site SQL Injection Vulnerability

SourceCodester Online Discussion Forum Site is an application from SourceCodester, Inc. An online discussion forum. A SQL injection vulnerability exists in Online Discussion Forum Site version 1.0, which originates from an incorrect manipulation of the parameter username resulting in sql injectio...

WordPress Plugin uListing has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-23215 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue has been found in the SourceCodester Service Provider Management System, affecting some unknown functionality of the file view.php. The manipulation o...

Service Provider Management System SQL Injection Vulnerability

Service Provider Management System is a web-based application developed by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in SourceCodester Service Provider Management System version 1.0, whic...

PT-2023-22343 · Prestashop · Prestashop Jmspagebuilder

Name of the Vulnerable Software and Affected Versions: PrestaShop jmspagebuilder version 3.x Description: The issue is related to SQL Injection via the ajax jmspagebuilder.php file. Recommendations: For PrestaShop jmspagebuilder version 3.x, consider restricting access to the ajax...

CVE-2023-3062

A vulnerability was found in code-projects Agro-School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument password leads to sql injection. It is possible to launch the attack remotely. The identifier o...

CVE-2023-2201

The Web Directory Free for WordPress is vulnerable to SQL Injection via the ‘postid’ parameter in versions up to, and including, 1.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...

Sql injection

The Web Directory Free for WordPress is vulnerable to SQL Injection via the ‘postid’ parameter in versions up to, and including, 1.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...

PT-2023-22877 · Unknown · Campcodes Retro Cellphone Online Store

Name of the Vulnerable Software and Affected Versions: Campcodes Retro Cellphone Online Store version 1.0 Description: A critical vulnerability has been found in the software. The issue is related to an unknown function of the file /admin/modal add product.php, where the manipulation of the...

CVE-2023-33509

KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...

CVE-2021-31233

SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive information via the editbreed.php parameter...

Fighting Cock Information System SQL Injection Vulnerability

Fighting Cock Information System is a chicken information system by chrisjelo individual developer. A security vulnerability exists in Fighting Cock Information System version 1.0, which stems from an SQL injection vulnerability. The vulnerability can be exploited to obtain sensitive information...

Train Station Ticketing System SQL Injection Vulnerability

Train Station Ticketing System is a Train Station Ticketing System by Carlo Montero Individual Developer. A SQL injection vulnerability exists in Train Station Ticketing System version 1.0, which is caused by incorrect manipulation of the parameter id...

Piwigo SQL Injection

The vulnerability of the userlistbackend.php script in the Piwigo content management system is related to the lack of validation for the consistency of XML objects. Exploiting this vulnerability allows a malicious actor to carry out attacks based on SQL injections...

SourceCodester AC Repair and Services SQL Injection

The vulnerability in the “/admin/bookings/viewbooking.php” script of the SourceCodester AC Repair and Services system relates to the lack of protective measures for the SQL query structure when processing the parameter “tomail=&groupid=”. Exploiting this vulnerability allows an attacker to execut...

CVE-2023-28701

ELITE TECHNOLOGY CORP. Web Fax has a vulnerability of SQL Injection. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to perform arbitrary system commands, disrupt service or terminate service...

PT-2023-3090 · Elite Technology · Web Fax

Name of the Vulnerable Software and Affected Versions: ELITE TECHNOLOGY CORP. Web Fax affected versions not specified Description: The issue is related to SQL Injection, where an unauthenticated remote attacker can inject SQL commands into the input field of the "login page" to perform arbitrary...

PT-2023-24462 · Bluecms · Bluecms

Name of the Vulnerable Software and Affected Versions: BlueCMS version 1.6 Description: A SQL injection issue was found in BlueCMS via the keywords parameter at the "search.php" endpoint. Recommendations: For BlueCMS version 1.6, avoid using the keywords parameter in the "search.php" endpoint unt...

Xibo SQL injection vulnerability

Xibo is an open source content management system from Xibo Digital Signage. A security vulnerability exists in Xibo that stems from an SQL injection vulnerability that allows an authenticated user to steal data by injecting a specially crafted value into the parameter filter...