PT-2022-20740

Name of the Vulnerable Software and Affected Versions Magicpin version 3.4 Description An XML external entity XXE injection vulnerability allows attackers to access sensitive database information via a crafted SVG file. Recommendations For Magicpin version 3.4, update to a version that fixes the...

CVE-2022-31447: Improper Restriction of XML External Entity Reference

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

SQL Injection Vulnerability in mymps Backend

mymps is a php mysql based website builder. SQL injection vulnerability exists in mymps backend, which can be exploited by attackers to obtain sensitive database information...

CVE-2020-36523

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

CVE-2020-36523

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

Cross site scripting

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

CVE-2020-36523 PlantUML Database Information Macro cross site scripting

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

PT-2022-8974

Name of the Vulnerable Software and Affected Versions PlantUML version 6.43 Description A vulnerability was found in the Database Information Macro component, which can be exploited to lead to cross-site scripting. The attack can be launched remotely. Recommendations For version 6.43, consider...

CVE-2020-36523: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

PT-2022-21041

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the /eris/admin/category/index.php endpoint, specifically when the view parameter is set to edit and the id parameter is...

SQL Injection Vulnerability in Easy Attendance WEB Attendance Management Software

Easy Attendance WEB attendance management software is a network version of the B / S architecture WEB attendance management software. Eqin WEB Attendance Management Software has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

PT-2022-21001

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/rdms/admin/incidents/view incident.php" API endpoint, specifically through the id variable. This allows for potential...

Sql injection

Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates for the Manage Alerts page via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user,...

CVE-2021-35487

Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates for the Manage Alerts page via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user,...

Multi-Vendor Online Groceries Management System SQL Injection Vulnerability

Multi-Vendor Online Groceries Management System is a multi-vendor online grocery management system. A SQL injection vulnerability exists in Multi-Vendor Online Groceries Management System version 1.0, which can be exploited by an attacker to obtain sensitive database information via the id...

Covid-19 Travel Pass Management System SQL Injection Vulnerability

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. It provides an online platform for individuals to submit travel passes within the Covid-19 restrictions. A SQL injection vulnerability exists in Covid-19 Travel Pass Management System version 1.0, which stems from...

HMS SQL Injection Vulnerability

HMS is a computer or web-based hospital management system. version 1.0 of HMS is vulnerable to SQL injection, which stems from the presence of multiple parameters that can lead to SQL injection when requesting appointment.php using the POST method. An attacker could use this vulnerability to obta...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

SQL Injection Vulnerability in Panmicroeoffice8 (CNVD-2022-43843)

Panavision eoffice8 is a mobile office platform. A SQL injection vulnerability exists in Panmicroeoffice8, which can be exploited by attackers to obtain sensitive information from the database...