Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...

PT-2022-27753 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/hss/classes/Master.php?f=delete product" API endpoint. Recommendations: For Helmet Store Showroom Site version...

Online Leave Management System SQL注入漏洞

Online Leave Management System is an online leave management system. version v1.0 of Online Leave Management System has a security vulnerability that originated through the component /admin/?page=user/manageuser&id= found to contain a SQL injection vulnerability. No detailed vulnerability details...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. Canteen Management System v1.0 suffers from a SQL injection vulnerability, which stems from an id parameter on /editorder.php found to contain a SQL injection vulnerability...

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from the id parameter in /diagnostic/editcategory.php being susceptible to SQL injection attacks...

Online Leave Management System SQL注入漏洞

Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete designation lacks validation of external input SQL statements. An attacker could use this...

CVE-2022-35154

Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter...

Guest Management System SQL注入漏洞

Guest Management System is a web-based system designed to monitor the records of everyone entering a school or college. The Guest Management System suffers from a SQL injection vulnerability that stems from unknown code in its index.php component that manipulates the parameters username/pass to...

Online Railway Reservation System SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. Online Railway Reservation System v1.0 version suffers from a SQL injection...

PHP Matrimonial Script Hindu Matrimonial Script SQL注入漏洞

A security vulnerability exists in Hindu Matrimonial Script, an online marriage service website of PHP Matrimonial Script India, which can be exploited by attackers to perform SQL injection attacks...

Wedding Management System SQL注入漏洞

Wedding Management System is a wedding planning management system by John Paul Lim Gabule. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from Wedding-Management/wedding details.php page. details.php page lacks validation of externally entered SQL statements,...

CScms SQL注入漏洞

CScms is a content management system CMS developed based on the CI framework. cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers to conduct injection attacks via the component danceTopic.phpdel...

ImpressCMS SQL注入漏洞

ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums, and photo albums. ImpressCMS is vulnerable to a SQL injection vulnerability that stems from insufficient cleaning of user data passed in the groupps parameter of the...

H.H.G. Multistore SQL注入漏洞

H.H.G. Multistore is a software designed to manage multiple stores from the German company H.H.G. Multistore. A security vulnerability exists in H.H.G. Multistore v5.1.0 and below that allows an attacker to perform SQL injection via /admin/customers.php?page=1&cID...

CVE-2021-44653

Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application...

PHP和PHPGurukul Beauty Parlour Management System SQL注入漏洞

A security vulnerability in PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands in the sername parameter...

SQL Injection Vulnerability in Hsycms Frontend

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Hsycms suffers from a SQL injection vulnerability in the frontend. An attacker can exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Intelligent Internet of Things System of Nanjing Jiuzhe Software Technology Co.

Nanjing Jiuzhe Software Technology Co., Ltd. business scope includes: software development, technical services, technical consulting services, technology transfer and so on. Nanjing Jiuzhe Software Technology Co., Ltd. intelligent Internet of things system SQL injection vulnerability, attackers c...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend re***.php Page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

S-CMS School Building System suffers from SQL Injection Vulnerability

S-CMS School Building System is a content management system for school websites. A SQL injection vulnerability exists in S-CMS School Building System. An attacker can exploit the vulnerability to obtain sensitive database information...