10214 matches found
PT-2022-27214 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/asms/admin/?page=user/manage user&id=" endpoint. The id parameter is vulnerable to this type of attack. No...
Automotive Shop Management System SQL注入漏洞
Automotive Shop Management System is an automotive shop management system from Carlo Montero's personal developer. version v1.0 of Automotive Shop Management System is vulnerable to SQL injection, which originates from /asms/classes/Master.php?f=deletetransaction missing validation of external...
Online Leave Management System SQL注入漏洞
Online Leave Management System is an online leave management system. version v1.0 of Online Leave Management System has a security vulnerability that originated through the component /admin/?page=user/manageuser&id= found to contain a SQL injection vulnerability. No detailed vulnerability details...
Hostel searching project SQL注入漏洞
Hostel searching project is a hostel searching project by Mehedi Hassan, an individual developer. Hostel searching project has a security vulnerability that stems from an SQL injection issue in the propertyid parameter of the view-property.php file...
PT-2022-27213 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the /asms/classes/Master.php?f=delete transaction endpoint. This allows for potential unauthorized access and...
PT-2022-24793 · Unknown · College Management System
Name of the Vulnerable Software and Affected Versions: College Management System version 1.0 Description: The issue allows an admin user to upload a .php file containing malicious code via the student.php file, potentially leading to remote code execution. The authentication required for this...
CVE-2022-43262
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php...
PT-2022-10780 · Unknown · Simple Image Gallery System
Name of the Vulnerable Software and Affected Versions: Simple Image Gallery System version 1.0 Description: A SQL injection issue exists in the application, specifically through the id parameter on the album page. Recommendations: For Simple Image Gallery System version 1.0, avoid using the id...
Vulnerability fixed in Sophos UTM
A vulnerability has been fixed in Sophos UTM. The vulnerability allows an authenticated remote malicious person to perform an SQL injection to execute, potentially obtaining sensitive data. obtain. The vulnerability is located in the quarantine manager of the email component of Sophos UTM. Sophos...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. A security vulnerability exists in Online Diagnostic Lab Management System v1.0, which stems from the manipulation of the username parameter in its /diagnostic/login.php component that allows an attacker to...
Hospital Management System SQL注入漏洞
Hospital Management Center is a web system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. hospital Management Center is vulnerable to a SQL injection vulnerability that originates in an unknown function in the file patient-info.php Lack ...
CVE-2022-40405
WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs...
Simmeth System Supplier Manager SQL注入漏洞
Simmeth System Supplier Manager is a supply chain software from Simmeth System GmbH, Germany.A SQL injection vulnerability exists in versions prior to Simmeth System GmbH Supplier Manager 5.6. The vulnerability stems from the application's lack of validation of externally entered SQL statements,...
WoWonder Social Network Platform SQL注入漏洞
WoWonder Social Network Platform is a PHP social networking script by WoWonder. It is used to create your own social networking website. A security vulnerability exists in WoWonder Social Network Platform version 4.1.4, which stems from an attacker being able to implement SQL injection via the...
Liferay Portal和Liferay DXP SQL注入漏洞
Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...
ZOHO ManageEngine Password Manager Pro SQL注入漏洞
ZOHO ManageEngine Password Manager Pro is a password manager from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Password Manager Pro versions prior to 12122, PAM360 versions prior to 5711, and Access Manager Plus versions prior to 4306, which allows an attacker to implement SQL...
ZTE ZAIP-AIE SQL注入漏洞
ZTE ZAIP-AIE is a product of China's ZTE Corporation ZTE. The ZTE ZAIP-AIE suffers from a security vulnerability that stems from a lack of input validation on the server and a SQL injection vulnerability that allows an attacker to trigger an attack by constructing a malicious request, which in tu...
CVE-2022-43051
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=deletetest...
