6811 matches found
CVE-2022-41416
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/updatebooking.php...
CVE-2022-41536
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageuser.php...
CVE-2022-41535
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageborrower.php...
Sql injection
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageborrower.php...
Sql injection
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageuser.php...
CVE-2022-41535
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageborrower.php...
CVE-2022-41416
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/updatebooking.php...
CVE-2022-41416
CVE-2022-41416: The Online Tours & Travels Management System v1.0 has a SQL injection vulnerability exploit via the id parameter in /user/update_booking.php. Affects the system’s booking update endpoint; attacker-controlled id can lead to unauthorized data access and potential data integrity impa...
Open Source SACCO Management System SQL注入漏洞
Open Source SACCO Management System is an open source SACCO management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Open Source SACCO Management System v1.0, which originates from a SQL injection vulnerability in the id parameter in...
Purchase Order Management System SQL注入漏洞
Purchase Order Management System is a purchase order management system by Carlo Montero, an individual developer. A security vulnerability exists in Purchase Order Management System version 1.0, which is caused by a sql injection due to manipulation of the parameter id...
CVE-2022-41535
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageborrower.php...
CVE-2022-41536
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageuser.php...
CVE-2022-41536
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageuser.php...
CVE-2022-41408
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...
CVE-2022-41408
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...
CVE-2022-41407
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...
Sql injection
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/ajax.php?action=deleteborrower...
Sql injection
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...
CVE-2022-41530
Open Source SACCO Management System v1.0 is affected by a SQL injection in the id parameter of /sacco_shield/ajax.php?action=delete_borrower. Root cause: improper handling of user input leads to injection. Consequences per CVSS: high impact on confidentiality, integrity, and availability; exploit...