CVE-2023-1253

A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...

Health Center Patient Record Management System SQL注入漏洞

Health Center Patient Record Management System is a Health Center Patient Record Management System by Arvin Arandilla Individual Developer. A SQL injection vulnerability exists in SourceCodester Health Center Patient Record Management System version 1.0, which stems from a problem in the file...

FunAdmin SQL注入漏洞

FunAdmin is FunAdmin open source based on ThinkPHP6 + Layui development of a lightweight high-profile back-end development system . FunAdmin version 3.2.0 there is a security vulnerability , the vulnerability stems from the memberMember.php selectFields parameter found to contain SQL injection...

Zhongbang CRMEB SQL注入漏洞

Zhongbang CRMEB is an open source e-commerce management system from Zhongbang in Xi'an, China. A security vulnerability exists in CRMEB version 1.3.4 and earlier versions, which originated from an SQL injection attack via /api/admin/user/list...

PT-2023-13545 · Mia-Med · Mia-Med

Name of the Vulnerable Software and Affected Versions: Mia-Med versions prior to 1.0.0.58 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious SQ...

CVE-2023-24763

In the module "Xen Forum" xenforum for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0...

CVE-2023-0979

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MedData MedDataPACS allows SQL Injection.This issue affects MedDataPACS : before 2023-03-03...

PT-2023-16661 · Unknown · Meddatapacs

Name of the Vulnerable Software and Affected Versions: MedDataPACS versions prior to 2023-03-03 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: Fo...

The vulnerability in the trigger_referral.php script of the Gimmie Plugin allows a violator to execute arbitrary SQL queries.

The vulnerability in the triggerratethread.php script of the Gimmie Plugin is related to the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Email Registration SQL注入漏洞

Email Registration is drupalprojects open source an e-mail registration application . Allows users to register and login using their email address. An SQL injection vulnerability exists in Email Registration versions prior to 6.x-1.0, which stems from the fact that manipulation of the parameter...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Xen Forum versions prior to 2.13.0. An attacker exploited the...

PT-2023-9864 · Unknown · Igamingmodules Flashgames

Name of the Vulnerable Software and Affected Versions: iGamingModules flashgames version 1.1.0 Description: A critical issue was found in the software. It affects an unknown function of the file game.php. The manipulation of the lid argument leads to sql injection. This issue can be exploited...

Glox Technology Useroam Hotspot SQL注入漏洞

Glox Technology Useroam Hotspot is a hotspot system from Glox Technology. Glox Technology Useroam Hotspot suffers from a SQL injection vulnerability that stems from an unsatisfactory neutralization of the particular element used, resulting in SQL injection...

Accruent LLC Maintenance Connection SQL注入漏洞

Accruent LLC Maintenance Connection is a comprehensive work order management, preventive maintenance program and parts inventory solution. A security vulnerability exists in Accruent LLC Maintenance Connection versions 2021 and 2022.2, which stems from an SQL injection during emailing to the work...

CVE-2023-23315

The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method stripejsValidationModuleFrontController::initContent has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...

PT-2023-16776 · Sourcecodester · Computer Parts Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Parts Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file processlogin. The manipulation of the user argument leads to SQL injection. It i...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image zoom. A security vulnerability exists in the PrestaShop e-commerce platform prior to version 4.5.5, which stems from the module...

CVE-2023-1099

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

PT-2023-10265 · Unknown · Opencyclecompass Server-Php

Name of the Vulnerable Software and Affected Versions: OpenCycleCompass server-php affected versions not specified Description: A critical issue was found in OpenCycleCompass server-php, where the manipulation of the user argument leads to sql injection. This can be exploited remotely. The issue...

PT-2023-16754 · Sourcecodester · Sourcecodester Online Catering Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Catering Reservation System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online Catering Reservation System. This issue affects the file /reservation/add message.php of the...