PT-2023-16449 · Sourcecodester · Sourcecodester Canteen Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Canteen Management System version 1.0 Description: A critical issue affects some unknown functionality of the file removeUser.php. The manipulation of the id argument leads to SQL injection. The attack can be launched remotely,...

WebFinance SQL注入漏洞

WebFinance is a web application for managing invoices and handling customer contacts. A SQL injection vulnerability exists in fanzila WebFinance version 0.5, which stems from a problem with an unknown function in the file htdocs/admin/saveroles.php, where manipulation of the parameter id can lead...

PT-2023-15485 · Unknown · Bang Resto

Name of the Vulnerable Software and Affected Versions: Bangresto version 1.0 Description: The issue is related to a SQL Injection vulnerability. It affects the itemID parameter. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2023-16338 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online Tours & Travels Management System. The issue affects an unknown functionality of the file...

PT-2023-15594 · Unknown · Remote Clinic

Name of the Vulnerable Software and Affected Versions: RemoteClinic version 2.0 Description: The issue allows attackers to execute arbitrary commands and gain sensitive information. This is achieved via the id parameter to the "/medicines/profile.php" API endpoint. Recommendations: For RemoteClin...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from the id parameter of its...

Helm和Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. Helmet Store Showroom Site v1.0 suffers from a SQL injection vulnerability that originates from an SQL injection via...

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a doctor appointment management system from the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System version v1.0.0 that originates from a crafted payload that allows an attacker to execute arbitrary web...

Lead management system SQL注入漏洞

Lead management system is a lead management system developed by Mayuri K. A SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of external input SQL statements in the id parameter of removeBrand.php, and can be exploited by attackers to The...

PT-2023-15496 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeProduct.php" endpoint. This allows for potential manipulation of database queries. Recommendations: For Lead Management System...

PT-2023-15486 · Sourcecodester · Sourcecodester Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Dynamic Transaction Queuing System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the /queuing/index.php?page=display&id= endpoint. The id parameter is vulnerable to SQL injection attacks...

Nortek Control Linear eMerge E3-Series SQL注入漏洞

The Nortek Control Linear eMerge E3-Series is an access control from Nortek Control USA. It allows you to specify which doors a person can use to enter and exit a specified location at a specified time. A security vulnerability exists in several versions of the Nortek Control Linear eMerge...

webTareas SQL注入漏洞

webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.4p5, which originates from an SQL injection via the id parameter in...

CVE-2022-44860

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/updatestatus.php...

Automotive Shop Management System SQL注入漏洞

Automotive Shop Management System is an automotive shop management system by Carlo Montero Personal Developer. A security vulnerability exists in Automotive Shop Management System v1.0, which was discovered to contain a SQL injection vulnerability via the id parameter in...

CVE-2022-44414

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manageservice.php?id=...

Hostel searching project SQL注入漏洞

Hostel searching project is a hostel searching project by Mehedi Hassan, an individual developer. Hostel searching project has a security vulnerability that stems from an SQL injection issue in the propertyid parameter of the view-property.php file...

PT-2022-10780 · Unknown · Simple Image Gallery System

Name of the Vulnerable Software and Affected Versions: Simple Image Gallery System version 1.0 Description: A SQL injection issue exists in the application, specifically through the id parameter on the album page. Recommendations: For Simple Image Gallery System version 1.0, avoid using the id...

Hospital Management System SQL注入漏洞

Hospital Management Center is a web system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. hospital Management Center is vulnerable to a SQL injection vulnerability that originates in an unknown function in the file patient-info.php Lack ...

PT-2022-26824 · Unknown · Canteen Management System

Name of the Vulnerable Software and Affected Versions: Canteen Management System version 1.0 Description: A SQL injection issue was found in the Canteen Management System. The vulnerability can be exploited via the categoriesId parameter at the "/php action/fetchSelectedCategories.php" API...