6822 matches found
CVE-2022-0190
The Ad Invalid Click Protector AICP WordPress plugin before 1.2.6 is affected by a SQL Injection in the id parameter of the delete action...
S-CMS SQL注入漏洞
S-CMS is a PHP and MySQL based Content Management System CMS from China's S-CMS Corporation. A SQL injection vulnerability exists in S-CMS, which originates from the product's failure to securely handle special characters in the Oid parameter in the memberpay.php file. The vulnerability can be...
EasyJobs < 1.4.8 - Reflected Cross-Site Scripting
The plugin does not sanitise and escape the job-id parameter before outputting it back in a page, leading to a Reflected Cross-Site Scripting PoC https://example.com/wp-content/plugins/easyjobs/admin/partials/easyjobs-candidates-display.php?job-id=%22%3E%3Cimg/src/onerror=alert/XSS/%3E...
Online-Movie-Ticket-Booking-System-In-Php SQL注入漏洞
Online-Movie-Ticket-Booking-System-In-Php is an online movie booking system. Online-Movie-Ticket-Booking-System-In-Php suffers from a SQL injection vulnerability that stems from the about.php file not performing input validation on the id parameter. An attacker can append a SQL query to the input...
CVE-2021-24764
The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters id and filterssessionid of singlestatistics page, type and message of importexport page before outputting them back in pages/attributes in the admin dashboard, leading to Reflected Cross-Site Scripti...
WordPress plugin SQL注入漏洞
WordPress is a set of blogging platform developed by the WordPress Foundation using the PHP language. WordPress Wicked Folders plugin in version 2.8.10 has a SQL injection vulnerability, which stems from the failure to filter and escape the oderid parameter, and can be used by attackers to execut...
CVE-2021-41608
A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1...
Sql injection
SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve data from the application's backend database via boolean-based blind and UNION injection...
ClassApps SelectSurvey.NET SQL注入漏洞
Net is a survey software from ClassApps, Inc. built using Microsoft's cutting-edge . A SQL injection vulnerability exists in the ID parameter of the UploadedImageDisplay.aspx endpoint, which can be exploited by an unauthenticated attacker to retrieve data from the application's back-end database...
showdoc SQL注入漏洞
showdoc is open source a great tool for IT teams to share documents online. A SQL injection vulnerability exists in showdoc versions prior to 2.10.3, which stems from a lack of validation of the uid parameter of showdoc against externally entered SQL statements. An attacker can exploit this...
CVE-2022-22296
Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manageuser endpoint. Simply change the value and data of other users can be displayed...
Try My Recipe SQL注入漏洞
Try My Recipe is a recipe sharing website for anyone who likes to cook to explore other people's recipes and post/share their own. A SQL injection vulnerability exists in Sourcecodester Try My Recipe due to a lack of filtering and escaping of SQL data in the rid parameter, which could be exploite...
WordPress plugin SQL注入漏洞
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. A SQL injection vulnerability exists in previous versions of the Wordpress Plugin Cookie Notification Plugin 1.0.9, which stems from the product's failure to validate special characters in the id...
PT-2022-11272 · Unknown · Sourcecodester Online Learning System
Name of the Vulnerable Software and Affected Versions: sourcecodester Online Learning System version v2 Description: The issue allows attackers to execute arbitrary SQL commands via the faculty id parameter in the Login.php file. This enables attackers to manipulate the database, potentially...
CVE-2021-46024
Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cartadd.php, No login is required...
CVE-2021-46201
An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node...
CVE-2021-46201
An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node...
Sourcecodester Online Resort Management System SQL注入漏洞
Sourcecodester Online Resort Management System is an open source web-based application that provides online room reservations and can also be used as a simple website for resorts. sourcecodester Online Resort Management System in version v1.0 A SQL injection vulnerability exists, which stems from...