CVE-2023-23162

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php...

PT-2023-8556 · Sourcecodester · Sourcecodester Medical Certificate Generator App

Name of the Vulnerable Software and Affected Versions: SourceCodester Medical Certificate Generator App version 1.0 Description: The issue is related to a lack of protection against SQL query structure exploitation in the action.php script of the Medical Certificate Generator App. This allows a...

CVE-2023-0707

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affected by this issue is the function deleterecord of the file function.php. The manipulation of the argument id leads to sql injection. VDB-220346 is the identifier assigned to this...

XpressEngine SQL注入漏洞

XpressEngine is a CMS Content Management System that allows anyone to publish content easily, conveniently and freely. A SQL injection vulnerability exists in XpressEngine versions prior to 1.4.5, which stems from a problem with certain unknown processing in the component Update Query Handler, an...

PT-2023-9915 · Unknown · Xpressengine

Name of the Vulnerable Software and Affected Versions: XpressEngine versions up to 1.4.4 Description: A critical issue affects the Update Query Handler component, leading to sql injection. The estimated number of potentially affected devices worldwide is not available. There is no information abo...

Medical Certificate Generator App SQL注入漏洞

The Medical Certificate Generator App is a simple web application for medical clinics. A SQL injection vulnerability exists in the Medical Certificate Generator App, which stems from the id parameter of some of the methods on the managerecord.php page that can lead to SQL injection...

Medical Certificate Generator App SQL注入漏洞

The Medical Certificate Generator App is a simple web application for medical clinics. A SQL injection vulnerability exists in Medical Certificate Generator App, which stems from the id parameter of the deleterecord method on the function.php page, which can lead to an SQL injection...

CVE-2023-24198

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at savewinner.php via the ticketid and draw parameters...

PT-2023-10154 · Unknown · Gimmie Plugin

Name of the Vulnerable Software and Affected Versions: Gimmie Plugin version 1.2.2 Description: A critical issue has been found in the Gimmie Plugin, affecting an unknown functionality of the file trigger login.php. The manipulation of the userid argument leads to sql injection. Upgrading to...

Event Management System SQL注入漏洞

Event Management System is an event management system. A SQL injection vulnerability exists in Calendar Event Management System version 2.3.0, which can be exploited by an attacker to perform SQL injection via the start/end parameter...

jocms SQL注入漏洞

jocms is mxgbr individual developers an easy to edit simple CMS. A security vulnerability exists in jocms version 0.8, which is caused by SQL injection, and can be exploited by remote attackers to run arbitrary SQL commands and view sensitive information via the josetmask function in...

WebFinance SQL注入漏洞

WebFinance is a web application for managing invoices and handling customer contacts. A SQL injection vulnerability exists in WebFinance version 0.5, which stems from a problem with the unknown code in the file htdocs/admin/saveContractSignerRole.php, where manipulation of the parameters n/v can...

jocms SQL注入漏洞

jocms is an easy-to-edit simple CMS for mxgbr individual developers. A security vulnerability exists in version 0.8 of jocms, which is caused by SQL injection and can be exploited by remote attackers to run arbitrary SQL commands and view sensitive information via the jojsoncheck function in...

RuoYi SQL注入漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi versions prior to v4.7.5, which stems from a problem with the component /tool/gen/createTable, resulting in SQL injection...

Forget Heart Message Box SQL注入漏洞

Forget Heart Message Box is a message site. v1.1 of Forget Heart Message Box contains a security vulnerability that originates from a SQL injection vulnerability found through the name parameter in /admin/loginpost.php. No detailed vulnerability details are available at this time...

CVE-2023-22900

Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

WordPress plugin GiveWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2023-0570

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects an unknown part of the file user\operations\paymentoperation.php. The manipulation of the argument bookingid leads to sql injection. It is possible to initiate...

CVE-2023-0562

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched...

CVE-2023-0561

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file /user/s.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The explo...