10442 matches found
The Next Generation of Genealogy Sitebuilding: SQL Injection Vulnerabilities
The Next Generation of Genealogy Sitebuilding is a genealogy software in a web server.The Next Generation of Genealogy Sitebuilding version 11.1.0 and earlier versions are vulnerable to SQL injection, which can be exploited by attackers to parameter primaryID to cause SQL injection...
CVE-2021-37589
Virtua Cobranca before 12R allows SQL Injection on the login page...
CVE-2021-37589
Virtua Cobranca before 12R allows SQL Injection on the login page...
CVE-2022-30927
A SQL injection vulnerability exists in Simple Task Scheduling System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable "id" parameter...
CVE-2022-30927
A SQL injection vulnerability exists in Simple Task Scheduling System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable "id" parameter...
CVE-2022-30469
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman§ion=get&page=grid leads to SQL injection...
Wolters Kluwer TeamMate+ has a SQL injection vulnerability
Wolters Kluwer TeamMate Audit is a cloud-based audit management tool from Wolters Kluwer Netherlands. A SQL injection vulnerability exists in Wolters Kluwer TeamMate Audit version 28.0.19.0, which stems from a lack of filtering and escaping of SQL data in search forms. An attacker could use this...
Afian FileRun SQL Injection Vulnerability
Afian FileRun is a full-featured web-based file manager. sql injection vulnerability exists in Afian Filerun version 20220202, which stems from a lack of cleanup of the POST parameter metadata in the /?module=fileman§ion=get&page=grid page. An attacker could exploit this vulnerability to cause SQ...
CVE-2022-32026
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/managebooking.php?id=...
CVE-2022-32026
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/managebooking.php?id=...
CVE-2022-31994
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/viewdetails&id...
CVE-2022-32011
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...
CVE-2022-31986
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailycourtrentalreport&date=...
CVE-2022-31991
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deletecourt...
CVE-2022-31985
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...
CVE-2022-31992
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=courtrentals/viewcourtrental&id=...
CVE-2022-32003
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/viewcourt.php?id=...
CVE-2022-32003
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/viewcourt.php?id=...