CVE-2021-38733

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntBlogCat.php...

CVE-2021-35387

Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php...

Canteen Management System SQL Injection Vulnerability

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. Canteen Management System version 1.0 suffers from a SQL injection vulnerability that stems from the userid parameter of /phpaction/fetchSelectedUser.php being susceptible to SQL injection...

Simple Cold Storage Management System SQL Injection Vulnerability

Simple Cold Storage Management System is a Simple Cold Storage Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Cold Storage Management System version 1.0, which originates from the id parameter of /admin/?page=bookings/viewdetails being...

SEMCMS SQL Injection Vulnerability

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which stems from a SQL injection issue in AntInfo.php...

WordPress plugin Quiz And Survey Master has a SQL injection vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

SEMCMS SQL Injection Vulnerability

SEMCMS is a multilingual foreign trade web content management system CMS.A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which originates from the lack of validation of externally entered SQL statements in AntZekou.php. An attacker can use this vulnerability to execute illegal SQ...

SQL Injection Vulnerability in Employee Record Management System

PHPGurukul Phpgurukul Employee Record Management System is an Employee Record Management System from PHPGurukul, Inc. An SQL injection vulnerability exists in Employee Record Management System version 1.2, which stems from an SQL injection issue in editempprofile.php...

SEMCMS SQL Injection Vulnerability

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.2, which stems from a SQL injection issue in SEMCMSUser.php...

PT-2022-23834 · Unknown · Sourcecodester Online Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Medicine Ordering System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file "admin/?page=orders/view order". The manipulation of the id argument leads to SQL...

Feathers SQL Injection Vulnerability

Feathers is Feathers open source a lightweight Web framework. Used to create APIs and real-time applications using TypeScript or JavaScript . Feathers has a security vulnerability , the vulnerability stems from improper filtering of parameters , resulting in SQL injection...

Feathers SQL Injection Vulnerability

Feathers is Feathers open source a lightweight Web framework. Used to create APIs and real-time applications using TypeScript or JavaScript . Feathers has a security vulnerability , the vulnerability stems from incorrect validation of user input...

WordPress plugin Blog2Social has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

OpenCats SQL injection vulnerability

OpenCats is an open source recruitment process management system. OpenCats v0.9.6 suffers from a SQL injection vulnerability that stems from a security issue with the tagid variable in the tag update function. No detailed vulnerability details are provided at this time...

Canteen Management System security vulnerabilities

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A security vulnerability exists in Canteen Management System version 1.0, which stems from some unknown processing in the file edituser.php being affected, where manipulation of the parameter id may resu...

Open Source SACCO Management System SQL Injection Vulnerability

Open Source SACCO Management System is an open source SACCO management system by Mayuri K., an individual developer. A security vulnerability exists in Open Source SACCO Management System v1.0, which is caused by a SQL injection in its /saccoshield/manageloan.php component...

WordPress Plugin WP Custom Cursors SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

Open Source SACCO Management System SQL Injection Vulnerability

Open Source SACCO Management System is an open source SACCO management system by Mayuri K. Individual developer. A security vulnerability exists in Open Source SACCO Management System v1.0, which stems from the id parameter of its /saccoshield/manageuser.php component that allows an attacker to...

Online Tours & Travels Management System SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which originates from a SQL injection point in the id parameter in /user/updatebooking.php...

PT-2022-26320 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL Injection via the /csms/classes/Master.php?f=delete storage endpoint. This allows for potential unauthorized access and manipulation of data. No...