357 matches found
CVE-2023-3339: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument testid leads to sql injection. The attack can be launched remotely...
PT-2023-20539 · Sourcecodester · Sourcecodester Online Tours & Travels Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue was found in the system, affecting the exec function of the disapprove delete.php file. The manipulation of the id argument leads to SQL...
CVE-2022-38260: Improper Neutralization of Special Elements used in an SQL Command
Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=questiondelete&id=...
Sql injection
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php...
CVE-2022-36735: Improper Neutralization of Special Elements used in an SQL Command
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php...
PT-2022-23595 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the bookId parameter at the "/admin/delete.php" API endpoint. Recommendations: For Library...
CVE-2022-36730: Improper Neutralization of Special Elements used in an SQL Command
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php...
CVE-2022-36727
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php...
CVE-2022-36727: Improper Neutralization of Special Elements used in an SQL Command
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php...
PT-2022-23586 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: A SQL injection issue was found in the Library Management System via the bookId parameter at the "/staff/delete.php" API endpoint. Recommendations: For Library Management System version 1.0,...
PT-2022-18749
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description The Attendance and Payroll System contains a SQL injection vulnerability. This issue is present in the adminovertime delete.php component. Recommendations For Attendance and Payroll System...
PT-2022-18747
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description A SQL injection issue was found in the Attendance and Payroll System via the adminattendance delete.php component. Recommendations For Attendance and Payroll System version 1.0, consider...
PT-2022-18751
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description A SQL injection issue was found in the Attendance and Payroll System via the adminposition delete.php component. Recommendations For Attendance and Payroll System version 1.0, consider...
PT-2022-18746
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description The Attendance and Payroll System contains a SQL injection issue via the adminattendance delete.php component. Recommendations For Attendance and Payroll System version 1.0, consider...
PT-2022-18750
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description The Attendance and Payroll System contains a SQL injection vulnerability via the component adminschedule delete.php. This issue allows for potential exploitation. Recommendations For...
PT-2022-18745
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description A SQL injection issue was found in the Attendance and Payroll System via the admincashadvance delete.php component. Recommendations For Attendance and Payroll System version 1.0, consider...
PT-2022-18744
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description A SQL injection issue was found in the Attendance and Payroll System via the adminemployee delete.php component. Recommendations For Attendance and Payroll System version 1.0, consider...
PT-2022-13288
Name of the Vulnerable Software and Affected Versions Login with phone number WordPress plugin versions prior to 1.3.7 Description The issue allows an unauthenticated user to remotely delete plugin files due to the lack of authentication or authorization checks in the delete.php file placed in th...
