1509 matches found
PT-2023-18367
Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0 Description A critical vulnerability was found in the software, affecting the file contactus1.php. The manipulation of the email argument leads to SQL injection. The attack can be...
Campcodes Retro Basketball Shoes Online Store SQL注入漏洞
Campcodes Retro Basketball Shoes Online Store is an online store for retro basketball shoes from Campcodes. A SQL injection vulnerability exists in Campcodes Retro Basketball Shoes Online Store version 1.0, which originates from a SQL injection vulnerability in the parameter email in the file...
CVE-2023-2043
A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/customerdb/operator.svc/a of the component Edit Handler. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack...
CVE-2023-2038
A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been declared as critical. This vulnerability affects unknown code of the file adminclass.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
PT-2023-17439 · Unknown · Control Id Rhid
Name of the Vulnerable Software and Affected Versions: Control iD RHiD version 23.3.19.0 Description: A problematic vulnerability was found in the Edit Handler component, affecting an unknown part of the file /v2/customerdb/operator.svc/a. The manipulation of the email argument leads to SQL...
Video Sharing Website SQL注入漏洞
Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem with the file adminclass.php, where manipulation of the parameter email can lead to sql injection...
CVE-2023-1984
A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/checkavailability.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql injection. The attack c...
Sql injection
A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/checkavailability.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql injection. The attack c...
PT-2023-17391 · Sourcecodester · Sourcecodester Complaint Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Complaint Management System version 1.0 Description: A critical issue was found in the SourceCodester Complaint Management System. This issue affects the file /users/check availability.php of the component POST Parameter Handle...
Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29385)
Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to a SQL injection vulnerability, which stems from the lack of validation of external input SQL statements in the parameter email of...
Sourcecodester Complaint Management System SQL注入漏洞
Complaint Management System is an open source Php project . Used to request a complaint through the online service . Complaint Management System v1.0 version of the SQL injection vulnerability, the vulnerability stems from the component POST Parameter Handler file/users/checkavailability.php to t...
CVE-2023-1955
A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injection. It is possible to launch the attac...
Ecommerse v1.0 - Cross-Site Scripting (XSS) Vulnerability
Title: Ecommerse v1.0 - Cross-Site Scripting XSS Author: nu11secur1ty Vendor: https://github.com/winston-dsouza Software: https://github.com/winston-dsouza/ecommerce-website Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/winston-dsouza/ecommerce-website Description:...
Alphaware Simple E-Commerce System SQL注入漏洞
Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. A SQL injection vulnerability exists in Alphaware Simple E-Commerce System version 1.0, which is caused by incorrect manipulation of the email/password parameter...
Online Pizza Ordering System SQL注入漏洞
Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which originates from a security issue in the component login page admin/ajax.php?action=login2, which leads...
CVE-2023-27074
BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page...
CVE-2023-0968
The Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dn’, 'email', 'points', and 'date' parameters in versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2022-45677
SQL Injection Vulnerability in tanujpatra228 Tution Management System TMS via the email parameter to processes/studentlogin.process.php...
