10442 matches found
PT-2022-27753 · Unknown · Helmet Store Showroom Site
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/hss/classes/Master.php?f=delete product" API endpoint. Recommendations: For Helmet Store Showroom Site version...
Helmet Store Showroom Site SQL Injection Vulnerability
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...
Helmet Store Showroom Site SQL Injection Vulnerability
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...
AeroCMS SQL Injection Vulnerability
AeroCMS is a content management system from AeroCMS Inc. in the United States. A security vulnerability exists in AeroCMS version v0.0.1, which stems from the presence of a SQL injection by deleting parameters...
Exploit for SQL Injection in Zte Mf286R_Firmware
CVE-2022-39066 Firmware details: wainnerversion: BDPO...
PT-2022-27127 · Unknown · Rainygao Docsys
Name of the Vulnerable Software and Affected Versions: RainyGao DocSys affected versions not specified Description: A critical issue has been identified, affecting the getReposAllUsers function of the file /DocSystem/Repos/getReposAllUsers.do. The manipulation of the searchWord/reposId argument...
nodau SQL injection vulnerability
nodau is a simple console-based note-taking program by the individual developer TicklishHoneyBee. A security vulnerability exists in nodau, which stems from the fact that incorrect manipulation of the parameter value/name can lead to sql injection...
Automotive Shop Management System SQL Injection Vulnerability
Automotive Shop Management System is an automotive shop management system by Carlo Montero, an individual developer. A security vulnerability exists in Automotive Shop Management System version v1.0, which originates from an SQL injection via the id parameter in /services/viewservice.php...
Planet Enterprises Planet eStream SQL Injection Vulnerability
Planet Enterprises Planet eStream is a very simple and secure tool from Planet Enterprises, Inc. It makes video more accessible to students and staff at all levels of education. A SQL injection vulnerability exists in Planet Enterprises Planet eStream versions prior to 6.72.10.07, which was...
Simple Phone Book/Directory Web App SQL Injection Vulnerability
Simple Phone book/directory Web App is a simple phone book/directory web application by bakhtiar individual developer. A security vulnerability exists in Simple Phone Book/Directory Web App v1.0, which was discovered to contain an SQL injection vulnerability via the editid parameter of...
PT-2022-27366 · Unknown · Simple Phone Book/Directory Web App
Name of the Vulnerable Software and Affected Versions: Simple Phone Book/Directory Web App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the editid parameter at the "/PhoneBook/edit.php" API endpoint. Recommendations: For...
PT-2022-21343 · WordPress · Wp Csv Exporter
Name of the Vulnerable Software and Affected Versions: WP CSV Exporter WordPress plugin versions prior to 1.3.7 Description: The issue allows high privilege users, such as admins, to perform SQL injection attacks due to improper sanitization and escaping of some parameters before using them in a...
CVE-2022-4277
A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability affects unknown code of the file /Default/Bd. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...
webTareas SQL Injection Vulnerability
webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.4p5, which originates from an SQL injection via the id parameter in...
Student Information System SQL Injection Vulnerability
Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Student Information System versions prior to 2.1.11. No informatio...
ISIC SQL injection vulnerability
ISIC is a website backend by asith-eranga individual developer. A security vulnerability exists in ISIC tour booking that stems from the presence of SQL injection, which allows attackers to execute arbitrary commands via the username parameter in /system/user/modules/modusers/controller.php...
Simple Inventory Management System SQL Injection Vulnerability
Simple Inventory Management System is a simple inventory management system by Carlo Montero Personal Developer. A security vulnerability exists in Simple Inventory Management System v1.0, which stems from its /ims/login.php component that allows an attacker to implement SQL injection...
Sanitation Management System SQL Injection Vulnerability
Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System v1.0, which originates from an SQL injection via /php-sms/admin/?page=services/manageservice&id=...
SQL Injection Vulnerability in Poultry Farm Management System
Poultry Farm Management System is a full-featured poultry management system. A security vulnerability exists in Poultry Farm Management System v1.0, which was discovered to contain a SQL injection vulnerability via the del parameter of /Redcock-Farm/farm/category.php...
