CVE-2022-30048

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

CVE-2022-29009

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication...

CVE-2022-29006

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication...

PT-2022-19360 · Unknown · Directory Management System

Name of the Vulnerable Software and Affected Versions: Directory Management System version 1.0 Description: The issue allows attackers to bypass authentication due to multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. Recommendations: For Directory...

PT-2022-19361 · Unknown · Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: Dairy Farm Shop Management System version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication. Recommendations: Fo...

PT-2022-19363 · Unknown · Cyber Cafe Management System Project

Name of the Vulnerable Software and Affected Versions: Cyber Cafe Management System Project version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication. Recommendations:...

Cyber Cafe Management System SQL注入漏洞

Cyber Cafe Management System CCMS is an Internet cafe management system. version 1.0 of Cyber Cafe Management System Project is vulnerable to SQL injection, which stems from multiple SQL injection vulnerabilities in the username and password parameters in the administration panel. An attacker cou...

CVE-2022-0592

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users...

Explore IT Explore CMS SQL注入漏洞

Explore IT Explore CMS is a content management system from Explore IT Bangladesh. A security vulnerability exists in Explore CMS version 1.0, which originates from a SQL injection vulnerability found via /page.php?id= request...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo 2.9.5 version of a security vulnerability , the vulnerability stems from catmove.php in the existence of SQL injection , an...

piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. piwigo admin/grouplist.php has a SQL injection vulnerability that can be exploited by attackers to delete via the group parameter...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo admin/userperm.php has a SQL injection vulnerability that can be exploited by an attacker to inject it into admin.php via the...

Improper Access Control

shopxo/shopxo is vulnerable to improper access control. The vulnerability exists in Add function in Index.php because it doesn't validate visitors and existing databases which allows an attacker to inject and modify the original data in the database...

CVE-2022-29938

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter paymentid in interface\billing\newpayment.php via interface\billing\paymentmaster.inc.php leads to SQL injection...

LibreHealth EHR SQL注入漏洞

LibreHealth EHR is an open source electronic health record and medical practice management application. libreHealth EHR is vulnerable to SQL injection, which can be exploited by attackers to perform sql injection and steal data from the database...

CVE-2022-29155

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping...

CVE-2022-28099

Poultry Farm Management System v1.0 was discovered to contain a SQL injection vulnerability via the Item parameter at /farm/store.php...

BlueCMS SQL注入漏洞

BlueCMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in BlueCMS version 1.6, which stems from a SQL injection vulnerability in cooike...

Jfinal CMS SQL注入漏洞

Jfinal CMS is a java development information consulting website. jfinal CMS version 5.1.0 is vulnerable to SQL injection, which originates from com.jflyfox.system.log.LogController.java missing validation of external input SQL statements. An attacker could use this vulnerability to execute illega...