PHPGurukul Medical Card Generation System SQL注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which stems from the parameter editid in the file /admin/edit-card-detail.php that can lead to S...

PT-2024-16154 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue has been identified, affecting the /com/esafenet/servlet/policy/PrintPolicyService.java file. The manipulation of the policyId argument leads to SQL injection. This issue can be exploited...

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computer system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A security vulnerability exists in Hospital Management System version v1.0.0 that stems from the presence of a SQL injection vulnerability...

FunAdmin SQL注入漏洞

FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which stems from a SQL injection vulnerability in the selectFields parameter of the index method of...

Online Clinic Management System SQL注入漏洞

Online Clinic Management System is an online clinic management system by angel jude suarez, an individual developer. A security vulnerability exists in Online Clinic Management System version 1.0, which originates from a SQL injection vulnerability in the parameter id of...

CVE-2024-49615

Cross-Site Request Forgery CSRF vulnerability in Henrique Rodrigues SafetyForms allows Blind SQL Injection.This issue affects SafetyForms: from n/a through 1.0.0...

CVE-2024-49614

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Dan Alexander SermonAudio Widgets allows SQL Injection.This issue affects SermonAudio Widgets: from n/a through 1.9.3...

CVE-2024-49616

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nyasro Rate Own Post allows Blind SQL Injection.This issue affects Rate Own Post: from n/a through 1.0...

CVE-2024-10170

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing of the file getdoctor.php. The manipulation of the argument specilizationid leads to sql injection. The attack may be initiated remotely. T...

PT-2024-33573 · Unknown · Mytweetlinks

Name of the Vulnerable Software and Affected Versions: MyTweetLinks versions n/a through 1.1.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands, allowing Blind SQL Injection. This can lead to data compromise...

Codezips Sales Management System SQL注入漏洞

Codezips Sales Management System is an open source sales management system from Codezips. A SQL injection vulnerability exists in Codezips Sales Management System version 1.0, which stems from a parameter id in the file eletecustcom.php that can lead to SQL injection...

Codezips Sales Management System SQL注入漏洞

Codezips Sales Management System is an open source sales management system from Codezips. A SQL injection vulnerability exists in Codezips Sales Management System version 1.0, which stems from a parameter id in the file deletecustind.php that can lead to SQL injection...

PT-2024-33577 · Unknown · Apa Banner Slider

Name of the Vulnerable Software and Affected Versions: Apa Banner Slider versions n/a through 1.0.0 Description: A Cross-Site Request Forgery CSRF issue in Apa Apa Banner Slider allows SQL Injection. This means an attacker can trick a user into performing unintended actions on the web application...

WordPress plugin FERMA.Ru.Net SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

CVE-2024-10154

A vulnerability was found in PHPGurukul Boat Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file status.php of the component Check Booking Status Page. The manipulation of the argument emailid leads to sql injection. The attack may be...

WordPress plugin Photo Gallery Slideshow & Masonry Tiled Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG 5 suffers from a SQL injection vulnerability, which stems from the incorrect manipulation of the parameter id that can lead to sql injection...

PT-2024-16052 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue has been found, affecting the function updateNetSecPolicyPriority of the file /com/esafenet/servlet/ajax/NetSecPolicyAjax.java. The manipulation of the argument id/frontId leads to SQL...

PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which originates from an SQL injection vulnerability contained in the nopeople parameter in the book-boat.php?bid=1 page of the Book a...

PT-2024-16055 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical issue has been identified, affecting unknown code in the file /manage invoice.php. The manipulation of the invoice number argument leads to SQL injection. This issue...