PT-2022-21233

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/ffos/classes/Master.php?f=delete menu" API endpoint. This allows for potential unauthorized access and manipulation of database conten...

PT-2022-21253

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /hprms/classes/Master.php?f=delete room type API endpoint. This allows for potential unauthorized access and...

Mitsubishi Electric MELSEC iQ-F Series Improper Input Validation (CVE-2022-25161)

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/zx=32,64,80, y=T,R, z=ES,DS,ESS,DSS with serial number 17X or later and versions prior to 1.270, Mitsubishi Electric Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/zx=32,64,80, y=T,R, z=ES,DS,ESS,DSS with...

Mitsubishi Electric MELSEC iQ-F Series Improper Input Validation (CVE-2022-25162)

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/zx=32,64,80, y=T,R, z=ES,DS,ESS,DSS with serial number 17X or later and versions prior to 1.270, Mitsubishi Electric Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/zx=32,64,80, y=T,R, z=ES,DS,ESS,DSS with...

PT-2022-21023

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete court. This allows for potential manipulation of database...

PT-2022-21025

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the /bcms/classes/Master.php?f=delete service API endpoint. This allows for potential manipulation of database queries. No information is provided...

PT-2022-21022

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete product. This allows...

PT-2022-21004

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue allows deletion of any file via the /simple chat bot/classes/Master.php API endpoint with the f parameter set to delete img. Recommendations For ChatBot App with Suggestion version...

PT-2022-21012

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the /ofrs/classes/Master.php?f=delete team API endpoint, specifically through the f parameter. This could potentially lead to unauthorized data access ...

PT-2022-20992

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the /rdms/classes/Master.php?f=delete team endpoint. This allows for potential manipulation of database queries. No information is provided about th...

PT-2022-20995

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL injection via the /rdms/classes/Master.php?f=delete incident endpoint. This allows for potential manipulation of database queries. No information is provided abou...

CVE-2022-31346: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deleteservice...

PT-2022-20702

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue is related to SQL Injection via the /ocwbs/classes/Master.php?f=delete service endpoint. This allows for potential exploitation. Recommendations For Online Car Wash Booking Syste...

CVE-2022-31946: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=deleteteam...

PT-2022-20993

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the /rdms/classes/Master.php?f=delete report API endpoint. This allows for potential manipulation of database queries. No information is provided...

PT-2022-21013

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ofrs/classes/Master.php?f=delete inquiry" API endpoint. Recommendations For Online Fire Reporting System versi...

PT-2022-20994

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /rdms/classes/Master.php?f=delete respondent type API endpoint. This allows for potential manipulation of database...

PT-2022-20700

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /ocwbs/classes/Master.php API endpoint, specifically when the f parameter is set to delete booking...

MELSEC iQ-F CPU FX5U(C) and FX5UJ Buffer Overflow

The vulnerability of the CPU FX5UC and FX5UJ modules of the MELSEC iQ-F series is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system...

F-secure Atlant Denial of Service Vulnerability

F-secure Atlant is a platform from the Finnish company F-secure for building applications that can scan and detect malicious files. a denial-of-service vulnerability exists in F-Secure Atlant, which can be exploited by attackers to crash the scanning engine by scanning the aemobile component...