10214 matches found
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. Online Tours & Travels Management System suffers from a SQL injection vulnerability, which stems from an incorrect manipulation of the parameter id leading to sql injection...
The vulnerability in the admin/sendmailto.php script of the ZZCMS CMS system allows a hacker to execute arbitrary SQL code.
The vulnerability in the admin/sendmailto.php script of the ZZCMS CMS system relates to the lack of protection for the SQL query structure when processing the parameter tomail=&groupid=. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
PT-2023-22576
Name of the Vulnerable Software and Affected Versions Prestashop posstaticfooter version 1.0.0 Description The issue allows for SQL Injection via the posstaticfooter::getPosCurrentHook function. Recommendations For Prestashop posstaticfooter version 1.0.0, consider disabling the...
PT-2023-10350 · Php-Login · Php-Login
Name of the Vulnerable Software and Affected Versions: PHP-Login version 1.0 Description: A critical issue was found in the function checkLogin of the file login/scripts/class.loginscript.php within the POST Parameter Handler component. The manipulation of the myusername argument can lead to SQL...
CVE-2023-30203
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the eventid parameter at /php-jms/resultsheet.php...
PT-2023-22526 · Unknown · Judging Management System
Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: The Judging Management System is vulnerable to SQL injection via the "/php-jms/review result.php" endpoint, specifically through the mainevent id parameter. This allows for potential...
PT-2023-22584 · Unknown · Judging Management System
Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the event id parameter at the "/php-jms/result sheet.php" API endpoint. Recommendations: For...
AC Repair and Services System SQL注入漏洞
AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in AC Repair and Services System version 1.0, which stems from a misuse of the parameter id resulting in sql injection...
MLECMS SQL注入漏洞
MLECMS is a multi-language, free, open source content management system from MLECMS Inc. A SQL injection vulnerability exists in MLECMS version 3.0, which stems from the fact that incorrect operation of the parameter $SERVERREQUESTURI can lead to sql injection...
PT-2023-19113 · Sourcecodester · Sourcecodester Faculty Evaluation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/manage academic.php. The manipulation of the id argument leads to sql injection,...
Faculty Evaluation System SQL注入漏洞
Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of ajax.php?action=deletesubject...
PT-2023-19108 · Sourcecodester · Sourcecodester Faculty Evaluation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue was found in the SourceCodester Faculty Evaluation System, affecting some unknown functionality of the file "ajax.php?action=delete class". The manipulation of...
PT-2023-19134 · Sourcecodester · Sourcecodester Faculty Evaluation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue affects the processing of the file admin/manage restriction.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated...
Faculty Evaluation System SQL注入漏洞
Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of ajax.php?action=deleteclass...
PT-2023-19139 · Unknown · Sourcecodester Online Dj Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online DJ Management System. The issue affects an unknown function of the file admin/events/manage event.php,...
PT-2023-20806
Name of the Vulnerable Software and Affected Versions wangmarket CMS version 4.10 Description The issue allows remote attackers to run arbitrary SQL commands via the TableName parameter to the "/plugin/dataDictionary/tableView.do" API endpoint. This enables attackers to manipulate database querie...
wangmarket SQL注入漏洞
wangmarket is a privatized deployment of your own SAAS cloud website builder system for individual developers in China xnx3. A security vulnerability exists in wangmarket CMS version 4.10, which originates from an SQL injection vulnerability. A remote attacker can exploit this vulnerability to ru...
PT-2023-19090 · Sourcecodester · Resort Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Resort Reservation System version 1.0 Description: A critical issue has been found in the processing of the file view room.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated...
PT-2023-19392 · Sourcecodester · Ac Repair/Services System
Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file services/view.php. The manipulation of the id argument leads to sql injectio...