jfinal cms SQL注入漏洞

jfinal cms is a java development of powerful information consulting website , using the simple and powerful JFinal as the web framework , template engine with beetl , database with mysql , front-end bootstrap framework. A SQL injection vulnerability exists in jfinal cms version 5.1.0, which stems...

OcoMon SQL注入漏洞

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. An SQL injection vulnerability exists in OcoMon version v4.0, which stems from the cod parameter in download.php being vulnerab...

OcoMon SQL注入漏洞

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. An SQL injection vulnerability exists in OcoMon version v4.0, which stems from the cod parameter in showImg.php being vulnerabl...

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System, which stems from an unknown function in its getstatecity.php component that operates on the sc parameter to cause SQL...

CVE-2022-41403

OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/sonewlettercustompopup/newsletter...

OpenCart SQL注入漏洞

OpenCart is an open source e-commerce system by OpenCart team. The system provides modules for product reviews, product ratings, and product additions. A security vulnerability exists in OpenCart version 3.x, which originates from the email parameter of its Newsletter Custom Popup module URL:...

PT-2022-22300 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Human Resource Management System, affecting an unknown functionality of the file city.php. The...

CVE-2022-36635

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...

CVE-2022-42074

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=...

CVE-2022-42073

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...

CVE-2022-40826

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orhaving function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CVE-2022-40872

An SQL injection vulnerability issue was discovered in Sourcecodester Simple E-Learning System 1.0., in /vcs/classRoom.php?classCode=, classCode...

CVE-2022-40830

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php wherenotin function. Note: Multiple third parties have disputed this as not a valid vulnerability...

CodeIgniter SQL注入漏洞

CodeIgniter is an open source web framework written in PHP. A SQL injection vulnerability exists in CodeIgniter version 3.1.13 and earlier versions, which stems from a SQL injection problem in the wherein method in the systemdatabaseDBquerybuilder.php location...

Web-Based Student Clearance System SQL注入漏洞

Web-Based Student Clearance System is a web-based student clearance system from the personal developer Ndueso Okorie.A SQL injection vulnerability exists in Web-Based Student Clearance System, which stems from the lack of validation of external input SQL statements in the parameter txtusername in...

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from the id parameter in /diagnostic/editcategory.php being susceptible to SQL injection attacks...

PT-2022-25560 · Unknown · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter versions =3.1.13 Description: The issue concerns a SQL Injection vulnerability via the or where not in function in the system/database/DB query builder.php file. Note that the validity of this issue has been disputed by multiple...

PT-2022-25561 · Unknown · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter versions =3.1.13 Description: The issue concerns SQL Injection via the or like function in the system/database/DB query builder.php file. Note that the validity of this issue has been disputed by multiple third parties...

CVE-2022-42243

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/managestorage.php?id=...

Simple Cold Storage Management System SQL注入漏洞

Simple Cold Storage Management System is a cold storage management system. simple cold storage management system /csms/classes/Master.php?f=deletebooking is vulnerable to SQL injection, a remote attacker can use this vulnerability to submit a special SQL request to manipulate the database, which...