Wedding Planner client_edit.php SQL Injection Vulnerability

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally...

Online Tours & Travels Management System update_packages.php SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which stems from a lack of validation of externally-entered SQL statements in the id parameter of...

Online Tours & Travels Management System update_tax.php SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which stems from a lack of validation of externally-entered SQL statements in the id parameter of...

Shenzhen Lanning Software Co., Ltd. has SQL injection vulnerability in Lanning Intelligent Collaboration Platform

Shenzhen Lailing Software Co., Ltd. is a well-known large platform OA service provider and a leading knowledge management solution provider in China. It is a national high-tech enterprise specializing in knowledge-based consulting, software development, implementation and technical services for...

PT-2022-14153 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

Beijing UpCloud Technology Development Co., Ltd. website building system has SQL injection vulnerability

Beijing UpCloud Technology Development Co., Ltd. was established on July 30, 2009. The company's business scope includes: technology promotion services; economic trade consulting; computer graphic design; advertising design, production; enterprise planning; software development, etc. Ltd. has a S...

SQL Injection Vulnerability in the Integrated Management System of River Management System of Sichuang Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the integrated river management system of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive information from the database...

Stored XSS in 'Table name' field via Database information function

Description When the administrator uses the Database information function, malicious code will be accidentally called and executed through two cases: 1. 1 An internal attacker local with access right to the database could insert malicious content into the table name field by creating a table in t...

SQL injection vulnerability exists in RPCMS (CNVD-2022-64953)

RPCMS is a lightweight content management/blogging system based on PHP MYSQL.RPCMS is vulnerable to SQL injection, which can be exploited by attackers to obtain sensitive database information...

PT-2022-22221

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the grade parameter at the "/school/view/timetable insert form.php" API endpoint. This allows for potential unauthorized access to...

PT-2022-21309

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/?p=products/view product&id=" endpoint, where the id variable is vulnerable. This allows for potential unauthorized access to database information. ...

Hospital Management System SQL Injection Vulnerability (CNVD-2022-74094)

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. hospital Management System v1.0 is vulnerable to an SQ injection vulnerability that originates in the doctorlogin.php page. A SQL...

Hospital Management System SQL Injection Vulnerability (CNVD-2022-74095)

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. hospital Management System v1.0 is vulnerable to a SQL injection vulnerability that originates in the adminlogin. A SQL injection issue...

CVE-2022-22367: Cleartext Storage of Sensitive Information

IBM UrbanCode Deploy UCD 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain text. IBM X-Force ID: 221008...

PT-2022-15394

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 Description The issue could disclose sensitive database information to a local user in plain text. Recommendations For versions 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1,...

CVE-2022-22494

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940...

PT-2022-21274

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the /school/model/get timetable.php endpoint, specifically through the id parameter. This allows for potential unauthorized access to...

Xxe

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

CVE-2022-31447

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

PT-2022-20740

Name of the Vulnerable Software and Affected Versions Magicpin version 3.4 Description An XML external entity XXE injection vulnerability allows attackers to access sensitive database information via a crafted SVG file. Recommendations For Magicpin version 3.4, update to a version that fixes the...