PT-2022-11479

Name of the Vulnerable Software and Affected Versions dynamicMarkt versions prior to 3.10 Description The issue is related to SQL injection in the kat parameter of "index.php". Recommendations For dynamicMarkt versions prior to 3.10, update to a version that contains a fix for this issue...

PT-2022-11478

Name of the Vulnerable Software and Affected Versions dynamicMarkt versions prior to 3.10 Description The issue is related to SQL injection in the kat1 parameter of the "index.php" endpoint. Recommendations For versions prior to 3.10, update to a version that contains a fix for this issue. At the...

CVE-2021-41756: Improper Neutralization of Special Elements used in an SQL Command

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

dynamicMarkt SQL注入漏洞

dynamicMarkt is a software. dynamicMarkt 3.10 and earlier versions are vulnerable to SQL injection, which stems from a problem with the kat parameter in index.php and can be exploited by attackers for SQL injection...

CVE-2021-41754: Improper Neutralization of Special Elements used in an SQL Command

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

CVE-2017-20029: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the file /lists/index.php of the component Edit Subscription. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

Simple Bus Ticket Booking System SQL Injection Vulnerability

Simple Bus Ticket Booking System is a bus ticket booking system. version 1.0 of Simple Bus Ticket Booking System is vulnerable to SQL injection attack via /SimpleBusTicket/index.php...

phpABook SQL Injection Vulnerability

phpABook is a simple address/contact management system using PHP and MySQL. phpABook version 0.9i is vulnerable to a SQL injection vulnerability caused by a failure to properly clean up the "authuser" parameter in the index.php script. An attacker could use this vulnerability to execute illegal S...

CVE-2022-30352

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...

Sql injection

Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php...

PT-2022-21036

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/eris/admin/company/index.php?view=edit&id=" API endpoint, specifically through the id variable. This allo...

CVE-2022-32010: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/user/index.php?view=edit&id=...

CVE-2022-32008: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/vacancy/index.php?view=edit&id=...

CVE-2022-32014: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...

PT-2022-21043

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection via the "/eris/index.php?q=category&search=" endpoint. This allows for potential exploitation. No information is provided about the estimated number of...

PT-2022-21041

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the /eris/admin/category/index.php endpoint, specifically when the view parameter is set to edit and the id parameter is...

CVE-2022-32018: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=...

PT-2022-21044

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the "/eris/index.php?q=result&searchfor=bycompany" API endpoint, specifically through the searchfor variable. No...

CVE-2022-32027: Improper Neutralization of Special Elements used in an SQL Command

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page=managecar&id=...

PT-2022-21040

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /eris/admin/employee/index.php?view=edit&id= endpoint, specifically through the id parameter. Recommendations...