CVE-2022-36720

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/modify1.php...

CVE-2022-36715

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...

CVE-2022-36700

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /items/manageitem.php...

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system by Carlo Montero. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /categories/ The vulnerability is caused by an SQL injection issue in the id parameter of the...

PT-2022-23565 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/categories/manage category.php" API endpoint. Recommendation...

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system by Carlo Montero. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /classes/Master .php?f=deletewaste location has an SQL injection issue with the id parameter. No...

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. .php?f=deletestockin location has a SQL injection issue with the id parameter. No detailed vulnerability details are available at this time...

PrestaShop Ap Pagebuilder SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts, and product image zoom. A security vulnerability exists in PrestaShop Ap Pagebuilder 2.4.4 and earlier versions...

CVE-2022-37113

Bluecms 1.6 has SQL injection in line 132 of admin/area.php...

CVE-2022-37112

BlueCMS 1.6 has SQL injection in line 55 of admin/model.php...

BlueCMS SQL注入漏洞

BlueCMS is a PHP and MySQL based content management system CMS. a security vulnerability exists in BlueCMS version 1.6, which stems from an SQL injection in line 55 of admin/model.php. No details of the vulnerability are currently available...

CVE-2022-25811

The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection...

VulnCheck KEV: CVE-2021-24762

The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the questionid GET parameter before using it in a SQL statement in the getquestion AJAX action, allowing unauthenticated users to perform SQL injection...

Ywoa SQL注入漏洞

Ywoa is an OA collaborative office system by the Chinese bestfeng individual developer. A security vulnerability exists in Ywoa versions prior to v6.1, which originates from an SQL injection vulnerability via /oa/setup/checkPool?database...

Yimioa SQL注入漏洞

Yimioa is the collaborative office software of Cloud.com Software. Based on enterprise-class workflow engine, in-depth research and development for 15 years, served more than 1000 customers, based on springboot framework. With mature OA office functions, comes with a low-code development platform...

CVE-2022-36727

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php...

CVE-2022-25228

CandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m=settings&a=show' via the 'userID' parameter, in '/index.php?m=candidates&a=show' via the 'candidateID', in '/index.php?m=joborders&a=show' via the 'jobOrderID' and '/index.php?m=companies&a=show' via...

CVE-2022-35154

Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter...

PT-2022-22916 · Unknown · Sazanrjb Inventorymanagementsystem

Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in Stocks.java allows attackers to execute arbitrary SQL commands via the productcode parameter. This enables unauthorized access and manipulation of database...

PT-2022-22587 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus version 3.6.1 Description: The issue is related to a SQL injection vulnerability. It occurs via the keyword parameter at the /service/impl/BookServiceImpl.java endpoint. Recommendations: For Novel-Plus version 3.6.1, consider...