Exploit for SQL Injection in Jflyfox Jfinal_Cms

CVE-2022-37207 CVE-2022-37207 POC Suggested description...

CVE-2022-37138

Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form...

CVE-2022-36669

Hospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

GLPI SQL injection vulnerability

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

GLPI SQL injection vulnerability

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

CVE-2022-38303

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...

CVE-2022-38304

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...

CVE-2022-38610

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php...

Online Leave Management System SQL Injection Vulnerability

Sourcecodester Online Leave Management System is an online leave management system. A security vulnerability exists in Online Leave Management System v1.0, which originates from a SQL injection vulnerability in /employees/manageleavetype.php via the id parameter...

Church Management System SQL Injection Vulnerability

Church Management System is a church management system. A security vulnerability exists in Church Management System v1.0, which originates from a SQL injection vulnerability in the id parameter via /admin/editevent.php...

CVE-2022-38274

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list...

CVE-2022-38276

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...

JFinal SQL Injection Vulnerability

JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /admin/image/list SQL injection vulnerability...

JFinal SQL Injection Vulnerability

JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /admin/folderrollpicture/list SQL injection vulnerability...

CVE-2022-38265

Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apartment.php...

Apartment Visitor Management System SQL Injection Vulnerability

Apartment Visitor Management System is an Apartment Visitor Management System by Carlo Montero Personal Developer. A security vulnerability exists in Apartment Visitor Management System v1.0, which was discovered to contain an SQL injection vulnerability via the editid parameter of...

PT-2022-24313 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.8.6 Description: A SQL injection issue was found in Nagios XI via the mib name parameter at the "Manage MIBs" page. Recommendations: For Nagios XI version 5.8.6, avoid using the mib name parameter in the affected page unti...

EMS system of the Office of the Thai Basic Education Commission: 6.2 SQL injection vulnerability

EMS 6.2 system of the Office of the Thai Basic Education Commission is an electrical energy management system organized by the Office of the Thai Basic Education Commission in Thailand. A SQL injection vulnerability exists in EMS 6.2 system of the Office of the Thai Basic Education Commission...

CVE-2022-3120

A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be launch...

PT-2022-20618 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System version 1.0 Description: A critical issue affects some unknown functionality of the file medicine details.php, where the manipulation of the medicine argument leads to sql injection. The attack...