CVE-2023-0532

A vulnerability classified as critical was found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/disapproveuser.php. The manipulation of the argument id leads to sql injection. The attack can be launched...

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can le...

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can le...

CVE-2022-46966

Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php...

WordPress Plugin LearnPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin LearnPress...

TuziCMS SQL注入漏洞

TuziCMS Rabbit CMS is a PHP and MySQL based content management system CMS for enterprise website builders. A security vulnerability exists in TuziCMS version v2.0.6, which stems from its AppManageControllerUserController.class.php component that allows attackers to implement SQL injection...

CVE-2022-4383

The CBX Petition for WordPress plugin through 1.0.3 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

Online-food-ordering-system SQL注入漏洞

Online-food-ordering-system is an application by tourist5 individual developers. A SQL injection vulnerability exists in Online-food-ordering-system version 1.0, which originates from SQL injection...

copperwall Twiddit SQL注入漏洞

Twiddit is a web application by copperwall individual developers. A SQL injection vulnerability exists in copperwall Twiddit, which stems from a vulnerability found in copperwall Twiddit that affects some unknown processing of the file index.php, an operation that results in sql injection...

PT-2023-15094 · Nexusphp · Nexusphp

Name of the Vulnerable Software and Affected Versions: NexusPHP versions prior to 1.7.33 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the conuser parameter in "takeconfirm.php", the delcheater parameter in "cheaterbox.php", or the user...

wuersch SQL注入漏洞

wuersch is a small workout android app for school projects by tynx individual developers. A SQL injection vulnerability exists in tynx wuersch. An attacker exploits this vulnerability to cause sql injection...

PT-2023-10247 · Danynab · Movify-J

Name of the Vulnerable Software and Affected Versions: danynab movify-j affected versions not specified Description: A critical vulnerability was found in danynab movify-j, affecting the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument...

DEBIAN-CVE-2023-22727

CakePHP is a development framework for PHP web apps. In affected versions the Cake\Database\Query::limit and Cake\Database\Query::offset methods are vulnerable to SQL injection if passed un-sanitized user request data. This issue has been fixed in 4.2.12, 4.3.11, 4.4.10. Users are advised to...

TheRadSystem SQL注入漏洞

TheRadSystem is a Cmput 391 project by saemorris Individual Developer. TheRadSystem suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter user/pass resulting in sql injection...

PT-2023-10622 · Unknown · Privatesky

Name of the Vulnerable Software and Affected Versions: PrivateSky affected versions not specified Description: A critical issue has been discovered, affecting the db/sql/mysqlUtils.js file, which leads to sql injection. Recommendations: Apply a patch to fix this issue...

PT-2023-10240 · Unknown · Evandro-Machado Trabalho-Web2

Name of the Vulnerable Software and Affected Versions: evandro-machado Trabalho-Web2 affected versions not specified Description: A critical issue has been found, affecting an unknown part of the file src/java/br/com/magazine/dao/ClienteDAO.java. This issue leads to sql injection. Recommendations...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the create function, by manipulating the @user field. Remediation Upgrade curupira to version 0.1.4 or higher. References - GitHub Commit - GitHub Release...

PT-2023-16178 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file admin/page-login.php. The manipulation of the email argument leads to...

PT-2023-12417 · Unknown · Nethserver

Name of the Vulnerable Software and Affected Versions: NethServer phonenehome affected versions not specified Description: A critical issue affects the function get info/get country coor of the file server/index.php, leading to sql injection. Recommendations: Apply a patch to fix this issue. As a...

PT-2023-14491 · WordPress · Fontsy

Name of the Vulnerable Software and Affected Versions: Fontsy WordPress plugin versions prior to 1.8.7 Description: The issue arises from improper sanitization and escaping of a parameter in a SQL statement, which is accessible via an AJAX action to unauthenticated users, leading to SQL injection...