PT-2023-10622 · Unknown · Privatesky

Name of the Vulnerable Software and Affected Versions: PrivateSky affected versions not specified Description: A critical issue has been discovered, affecting the db/sql/mysqlUtils.js file, which leads to sql injection. Recommendations: Apply a patch to fix this issue...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the create function, by manipulating the @user field. Remediation Upgrade curupira to version 0.1.4 or higher. References - GitHub Commit - GitHub Release...

PT-2023-16178 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file admin/page-login.php. The manipulation of the email argument leads to...

PT-2023-12417 · Unknown · Nethserver

Name of the Vulnerable Software and Affected Versions: NethServer phonenehome affected versions not specified Description: A critical issue affects the function get info/get country coor of the file server/index.php, leading to sql injection. Recommendations: Apply a patch to fix this issue. As a...

PT-2023-14491 · WordPress · Fontsy

Name of the Vulnerable Software and Affected Versions: Fontsy WordPress plugin versions prior to 1.8.7 Description: The issue arises from improper sanitization and escaping of a parameter in a SQL statement, which is accessible via an AJAX action to unauthenticated users, leading to SQL injection...

Vinylmaps SQL注入漏洞

Vinylmaps is a search engine for vinyl records by the individual developer of 2071174A. Vinylmaps suffers from an SQL injection vulnerability that stems from a security issue in the function contact in the file recordstoreapp/views.py, which leads to SQL injection...

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system. an SQL injection vulnerability exists in Online Food Ordering System, which stems from a problem in the unknown section of the file adminclass.php, where an operation on the parameter email can lead to sql injection. No details of the...

Stracker SQL注入漏洞

Stracker is an application by visegripped individual developers. Stracker suffers from a SQL injection vulnerability that stems from the fact that incorrect manipulation of the parameters symbol/startDate/endDate can lead to sql injection...

lolfeedback SQL注入漏洞

lolfeedback is an app by Philip B. Personal Developer. After linking your League of Legends account to LoLFeedback, feedback can only be provided to players you have played or A SQL injection vulnerability exists in lolfeedback, which stems from an unknown functionality impact and operates to cau...

PT-2023-16159 · Unknown · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical vulnerability has been found in the SourceCodester Online Food Ordering System, affecting the Signup Module in the file admin class.php. The...

Online Food Ordering System SQL注入漏洞

SourceCodester Online Food Ordering System is an online food ordering system. A SQL injection vulnerability exists in SourceCodester Online Food Ordering System, which stems from a problem with unknown code in the file adminclass.php, where an operation on the parameter username can lead to sql...

CVE-2022-46946

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletebrand...

Online Flight Booking Management System SQL注入漏洞

Online Flight Booking Management System is an online booking management system from the individual developer Carlo Montero. SourceCodester Online Flight Booking Management System suffers from a SQL injection vulnerability that originates in the unknown section of the reviewsearch.php file of its...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site version v1.0, which stems from the id parameter of its...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from the id parameter of its...

PT-2023-15117 · Unknown · Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Dynamic Transaction Queuing System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/manage user.php" API endpoint. Recommendations: For...

PT-2023-15113 · Unknown · Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Dynamic Transaction Queuing System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/ajax.php?action=delete user" API endpoint...

PT-2023-14937 · Unknown · Online Health Care System

Name of the Vulnerable Software and Affected Versions: Online Health Care System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the consulting id parameter at the "/healthcare/Admin/consulting detail.php" API endpoint...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from the id parameter of its...

CVE-2023-0254

The Simple Membership WP user Import plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in versions up to, and including, 1.7 due to insufficient escaping on the user supplied parameter. This makes it possible for authenticated attackers with administrative privileges...