6813 matches found
CVE-2022-32398
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/managecell.php:4...
CVE-2022-32397
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/viewvisit.php:4...
CVE-2022-32396
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/managevisit.php:4...
CVE-2022-32395
CVE-2022-32395 affects Prison Management System v1.0. The vulnerability is a SQL injection in the application layer, exploitable via the id parameter in /pms/admin/crimes/manage_crime.php, caused by lack of input filtering/escaping for the id value (CNVD-2022-48391 reference corroborates this). C...
CVE-2022-32394
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/viewinmate.php:3...
CVE-2022-32391
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/viewaction.php:4...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/inmates/managerecord. php in the id parameter lack of SQL data filter escaping, an attack...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates in the application /pms/admin/cells/managecell.php in the id parameter in /pms/admin/cells/managecell.php is missing the S...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system from Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/prisons/manageprison. php in the id parameter lack of SQL data filter escaping, an...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/inmates/viewinmate.php The vulnerability is caused by the lack of SQL data filter escapin...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/crimes/managecrime.php The vulnerability is caused by the lack of SQL data filtering...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/actions/viewaction.php The vulnerability is caused by the lack of SQL data filter escapin...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates from the application /pms/admin/user/manageuser.php in the id parameter in /pms/admin/user/manageuser.php is missing the S...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/inmates/manageinmate. php in the id parameter lack of SQL data filter escaping, an attack...
CVE-2022-34328
PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=authorsee request to index.php...
CVE-2022-34328
PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=authorsee request to index.php...
Cross site scripting
PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=authorsee request to index.php...
CVE-2022-34328
PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=authorsee request to index.php...
PT-2022-22133 · Pmb · Pmb
Name of the Vulnerable Software and Affected Versions: PMB version 7.3.10 Description: The issue allows reflected XSS via the id parameter in an lvl=author see request to "index.php". This can potentially lead to malicious script execution. Recommendations: For PMB version 7.3.10, consider...