CVE-2023-0531

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/bookingreport.php. The manipulation of the argument todate leads to sql injection. It is possible to launch the attack remotely...

CVE-2023-0532

A vulnerability classified as critical was found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/disapproveuser.php. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2023-0530

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/approveuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely...

Online Tours & Travels Management System SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can le...

Online Tours & Travels Management System SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can le...

CVE-2022-46966

Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php...

WordPress Plugin LearnPress has a SQL injection vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin LearnPress...

TuziCMS SQL Injection Vulnerability

TuziCMS Rabbit CMS is a PHP and MySQL based content management system CMS for enterprise website builders. A security vulnerability exists in TuziCMS version v2.0.6, which stems from its AppManageControllerUserController.class.php component that allows attackers to implement SQL injection...

CVE-2022-4383

The CBX Petition for WordPress plugin through 1.0.3 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

SQL injection vulnerabilities in online-food-ordering-systems

Online-food-ordering-system is an application by tourist5 individual developers. A SQL injection vulnerability exists in Online-food-ordering-system version 1.0, which originates from SQL injection...

Copperwall Twiddit SQL Injection Vulnerability

Twiddit is a web application by copperwall individual developers. A SQL injection vulnerability exists in copperwall Twiddit, which stems from a vulnerability found in copperwall Twiddit that affects some unknown processing of the file index.php, an operation that results in sql injection...

PT-2023-15094 · Nexusphp · Nexusphp

Name of the Vulnerable Software and Affected Versions: NexusPHP versions prior to 1.7.33 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the conuser parameter in "takeconfirm.php", the delcheater parameter in "cheaterbox.php", or the user...

PT-2023-10247 · Danynab · Movify-J

Name of the Vulnerable Software and Affected Versions: danynab movify-j affected versions not specified Description: A critical vulnerability was found in danynab movify-j, affecting the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument...

Wuensch SQL injection vulnerability

wuersch is a small workout android app for school projects by tynx individual developers. A SQL injection vulnerability exists in tynx wuersch. An attacker exploits this vulnerability to cause sql injection...

DEBIAN-CVE-2023-22727

CakePHP is a development framework for PHP web apps. In affected versions the Cake\Database\Query::limit and Cake\Database\Query::offset methods are vulnerable to SQL injection if passed un-sanitized user request data. This issue has been fixed in 4.2.12, 4.3.11, 4.4.10. Users are advised to...

The RadSystem SQL injection vulnerability

TheRadSystem is a Cmput 391 project by saemorris Individual Developer. TheRadSystem suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter user/pass resulting in sql injection...

PT-2023-10240 · Unknown · Evandro-Machado Trabalho-Web2

Name of the Vulnerable Software and Affected Versions: evandro-machado Trabalho-Web2 affected versions not specified Description: A critical issue has been found, affecting an unknown part of the file src/java/br/com/magazine/dao/ClienteDAO.java. This issue leads to sql injection. Recommendations...

PT-2023-10622 · Unknown · Privatesky

Name of the Vulnerable Software and Affected Versions: PrivateSky affected versions not specified Description: A critical issue has been discovered, affecting the db/sql/mysqlUtils.js file, which leads to sql injection. Recommendations: Apply a patch to fix this issue...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the create function, by manipulating the @user field. Remediation Upgrade curupira to version 0.1.4 or higher. References - GitHub Commit - GitHub Release...

PT-2023-16178 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file admin/page-login.php. The manipulation of the email argument leads to...