10442 matches found
Cambium Networks cnMaestro SQL injection vulnerability
Cambium Networks cnMaestro is a cloud-based or native software platform from Cambium Networks for secure end-to-end network control. Cambium Networks cnMaestro suffers from a SQL injection vulnerability that can be exploited by an attacker to steal data from accounts and devices...
Simple Client Management System SQL Injection Vulnerability
Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Master. php?f=deleteclient in the post request id...
CVE-2022-30047
Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...
CVE-2022-30048
Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...
CVE-2022-29009
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication...
CVE-2022-29006
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication...
PT-2022-19361 · Unknown · Dairy Farm Shop Management System
Name of the Vulnerable Software and Affected Versions: Dairy Farm Shop Management System version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication. Recommendations: Fo...
PT-2022-19360 · Unknown · Directory Management System
Name of the Vulnerable Software and Affected Versions: Directory Management System version 1.0 Description: The issue allows attackers to bypass authentication due to multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. Recommendations: For Directory...
PT-2022-19363 · Unknown · Cyber Cafe Management System Project
Name of the Vulnerable Software and Affected Versions: Cyber Cafe Management System Project version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication. Recommendations:...
Cyber Cafe Management System SQL Injection Vulnerability
Cyber Cafe Management System CCMS is an Internet cafe management system. version 1.0 of Cyber Cafe Management System Project is vulnerable to SQL injection, which stems from multiple SQL injection vulnerabilities in the username and password parameters in the administration panel. An attacker cou...
CVE-2022-0592
The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users...
Explore IT: Exploiting CMS SQL Injection Vulnerabilities
Explore IT Explore CMS is a content management system from Explore IT Bangladesh. A security vulnerability exists in Explore CMS version 1.0, which originates from a SQL injection vulnerability found via /page.php?id= request...
Piwigo SQL injection vulnerability
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo 2.9.5 version of a security vulnerability , the vulnerability stems from catmove.php in the existence of SQL injection , an...
Piwigo SQL injection vulnerability
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. piwigo admin/grouplist.php has a SQL injection vulnerability that can be exploited by attackers to delete via the group parameter...
Piwigo SQL injection vulnerability
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo admin/userperm.php has a SQL injection vulnerability that can be exploited by an attacker to inject it into admin.php via the...
Improper Access Control
shopxo/shopxo is vulnerable to improper access control. The vulnerability exists in Add function in Index.php because it doesn't validate visitors and existing databases which allows an attacker to inject and modify the original data in the database...
CVE-2022-29938
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter paymentid in interface\billing\newpayment.php via interface\billing\paymentmaster.inc.php leads to SQL injection...
LibreHealth EHR SQL Injection Vulnerability
LibreHealth EHR is an open source electronic health record and medical practice management application. libreHealth EHR is vulnerable to SQL injection, which can be exploited by attackers to perform sql injection and steal data from the database...
CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping...