AC Repair and Services System SQL注入漏洞

AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in AC Repair and Services System version 1.0, which stems from a misuse of the parameter id resulting in sql injection...

Campcodes Coffee Shop POS System SQL注入漏洞

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of validation of the parameter id of the file managesale.php against external SQL input, which can be exploited ...

PT-2023-18206 · Unknown · Campcodes Online Thesis Archiving System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Thesis Archiving System version 1.0 Description: A critical issue affects the processing of the file /admin/departments/view department.php, where the manipulation of the id argument leads to sql injection. The attack can be...

PT-2023-18217 · Unknown · Campcodes Online Thesis Archiving System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Thesis Archiving System version 1.0 Description: A critical issue has been found, allowing for SQL injection through the manipulation of the id argument in an unknown function of the file projects per curriculum.php. This can...

SourceCodester Task Reminder System SQL注入漏洞

Task Reminder System is a task reminder system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Task Reminder System version 1.0, which stems from a problem with the file /admin/?page=reminders/viewreminder, where manipulation of the parameter id can lea...

PT-2023-18079 · Sourcecodester · Sourcecodester Purchase Order Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Purchase Order Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Purchase Order Management System. The issue affects an unknown function of the file /admin/suppliers/view...

PT-2023-17710 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A critical issue has been found in the SourceCodester Vehicle Service Management System, affecting some unknown functionality of the file view service.php. The...

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. A cross-site scripting vulnerability exists in SourceCodester Vehicle Service Management System version 1.0, which originates from an unknow...

Campcodes Online Traffic Offense Management System 跨站脚本漏洞

Campcodes Online Traffic Offense Management System is a web-based traffic offense management system. A cross-site scripting vulnerability exists in Campcodes Online Traffic Offense Management System v1.0. The vulnerability stems from the lack of effective filtering and escaping of user-supplied...

Campcodes Online Traffic Offense Management System SQL注入漏洞

Campcodes Online Traffic Offense Management System is a web-based traffic offense management system. A SQL injection vulnerability exists in Campcodes Online Traffic Offense Management System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the paramet...

Medical Certificate Generator App SQL注入漏洞

Medical Certificate Generator App is a simple web application for medical clinics. A SQL injection vulnerability exists in SourceCodester Medical Certificate Generator App version 1.0, which stems from a problem in the file action.php, where manipulation of the parameter id can lead to sql...

PT-2023-17082 · Sourcecodester · Sourcecodester Medical Certificate Generator App

Name of the Vulnerable Software and Affected Versions: SourceCodester Medical Certificate Generator App version 1.0 Description: A critical issue has been discovered, affecting the action.php file, where the manipulation of the id argument leads to SQL injection. This can be initiated remotely...

lmxcms SQL注入漏洞

lmxcms dream cms is a website builder from China Dream Cms lmxcms company. SQL injection vulnerability exists in lmxcms version 1.41, the vulnerability stems from a security issue in the function update in the file AcquisiAction.class.php, which can lead to SQL injection via the parameter id...

CVE-2023-27210

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...

CVE-2023-27204

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

PT-2023-16866 · Sourcecodester · Sourcecodester Sales Tracker Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sales Tracker Management System version 1.0 Description: A critical issue has been found in the function delete client of the file classes/Master.php, where the manipulation of the argument id leads to sql injection. The attack...

PT-2023-21003 · Unknown · Best Pos Management System

Name of the Vulnerable Software and Affected Versions: Best POS Management System version 1.0 Description: The issue is a SQL injection vulnerability that can be exploited via the id parameter at the "/kruxton/manage user.php" API endpoint. This allows for potential unauthorized access to sensiti...

Best POS Management System SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Individual developer. A security vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability via the id parameter in /kruxton/receipt.php...

PT-2023-19772 · Funadmin · Funadmin

Name of the Vulnerable Software and Affected Versions: Funadmin version 3.2.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/databases/database/list" API endpoint. Recommendations: For Funadmin version 3.2.0,...

PT-2023-16708 · Sourcecodester · Sourcecodester Interview Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Reviewer Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the id argument in an unknown function of the file /reviewer...