10214 matches found
WordPress Plugin Simple Inventory Management SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...
Kashipara Dynamic Lab Management System SQL Injection Vulnerability
Kashipara Dynamic Lab Management System is a dynamic lab management system from Kashipara. A SQL injection vulnerability exists in Kashipara Dynamic Lab Management System 1.0 and earlier versions, which originates from a SQL injection vulnerability in the file loginprocess.php...
Kashipara Food Management System SQL注入漏洞
Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which is caused by a lack of validation of externally-entered SQL statements in the itemtype parameter of the stockedit.php fil...
CVE-2024-0287
A vulnerability was found in Kashipara Food Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file itemBillPdf.php. The manipulation of the argument printid leads to sql injection. The attack may be launched remotely. The exploit has...
CVE-2024-0273
A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as critical. Affected is an unknown function of the file addwasteentry.php. The manipulation of the argument itemname leads to sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2024-0270
A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file itemlistsubmit.php. The manipulation of the argument itemname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...
PT-2024-15434 · Unknown · Kashipara Food Management System
Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System versions up to 1.0 Description: A critical issue has been found in the Kashipara Food Management System, affecting an unknown functionality of the file billAjax.php. The manipulation of the item name argument...
Kashipara Food Management System SQL注入漏洞
Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which originates from a lack of validation of externally entered SQL statements in the id parameter of the addmaterialedit.php file, a...
PT-2024-15448 · Unknown · Kashipara Food Management System
Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System version 1.0 Description: A critical vulnerability has been found in the Kashipara Food Management System. This issue affects an unknown part of the file rawstock used damaged submit.php. The manipulation of th...
PT-2024-15428 · Unknown · Kashipara Hotel Management System
Name of the Vulnerable Software and Affected Versions: Kashipara Hospital Management System versions up to 1.0 Description: A critical issue has been found in the Kashipara Hospital Management System, affecting some unknown functionality of the file registration.php. The manipulation of the...
DzzOffice SQL Injection Vulnerability
DzzOffice is a platform that provides online collaborative office suite functionality from the American company Big Desk DzzOffice. The platform can be used to provide features such as online documents, forms, web drives, presentations, and more. A SQL injection vulnerability exists in DzzOffice...
Small CRM Users login panel SQL Injection Vulnerability
Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the Users login panel. No details of the vulnerability are available at this time...
CVE-2023-49666
Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmerdetails' parameter of the submitmateriallist.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-49633
Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyeraddress' parameter of the buyerdetailsubmit.php resource does not validate the characters received and they are sent unfiltered to the database...
Kashipara Billing Software SQL Injection Vulnerability
Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the buyeraddress parameter of the buyerdetailsubmit.php page is processed without filtering the data and sending it to the database for...
Online Notice Board System SQL Injection Vulnerability
Online Notice Board System is an online bulletin board system. A SQL injection vulnerability exists in the v1.0 version of Online Notice Board System, which occurs when the dd parameter of the user/updateprofile.php page is processed without filtering the data and sending it to the database for...
PT-2024-13964 · Unknown · Online Notice Board System
Name of the Vulnerable Software and Affected Versions: Online Notice Board System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the dd parameter of the "registration.php" resource does not validate the characters received, and th...
Kashipara Billing Software SQL Injection Vulnerability
Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the itemnameid parameter of the materialbill.php?action=itemRelation page is processed without filtering the data and sent to the...
Kashipara Billing Software SQL Injection Vulnerability
Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in the v1.0 version of Kashipara Billing Software, which originates when the bankdetails parameter of the partysubmit.php page is processed without filtering the data and sending it to the...
PT-2024-13982 · Unknown · Travel Website
Name of the Vulnerable Software and Affected Versions: Travel Website version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the city parameter of the "hotelSearch.php" resource does not validate the characters received, and they are sent...