CVE-2022-30000

Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?reciptno=...

CVE-2022-30000

CVE-2022-30000 affects Insurance Management System 1.0. A SQL injection flaw exists in the /insurance/editPayment.php endpoint, via the recipt_no parameter, allowing manipulation of database queries. Root cause is improper input handling for this parameter. Exploitation details are not provided i...

CVE-2022-30001

Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editAgent.php?agentid=...

CVE-2022-30001

CVE-2022-30001 maps to a SQL Injection vulnerability in Insurance Management System 1.0, exploitable through the /insurance/editAgent.php?agent_id= endpoint where the agent_id parameter can be manipulated to inject SQL. The vulnerability is confirmed across multiple sources; the PT-2022-19961 adv...

CVE-2022-30002

CVE-2022-30002 affects Insurance Management System 1.0 with a SQL Injection vulnerability in the endpoint /insurance/editNominee.php?nominee_id=. Root cause is unsafe handling of the nominee_id parameter, enabling arbitrary SQL execution. CVSS metrics in the record indicate Moderate to High impac...

CVE-2022-30002

Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nomineeid=...

PT-2022-19957 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue concerns SQL Injection via the /insurance/clientStatus.php endpoint, specifically through the client id parameter. This allows for potential manipulation of database queries...

Insurance Management System SQL注入漏洞

Insurance Management System is an insurance management system from the personal developer Angel Jude Reyes Suarez. Insurance Management System 1.0 is vulnerable to SQL injection, which could be exploited by attackers to obtain information about data in the target system...

Insurance Management System SQL注入漏洞

Insurance Management System is an insurance management system from the personal developer Angel Jude Reyes Suarez. Insurance Management System 1.0 is vulnerable to SQL injection, which could be exploited by attackers to obtain information about data in the target system...

PT-2022-19962 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue concerns SQL Injection via the /insurance/editNominee.php?nominee id= endpoint. This allows for potential manipulation of database queries using the nominee id parameter...

PT-2022-19961 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue allows for SQL Injection via the "/insurance/editAgent.php?agent id=" endpoint, where an attacker can manipulate the agent id variable to inject malicious SQL code. Recommendation...

Insurance Management System SQL注入漏洞

Insurance Management System is an insurance management system from the personal developer Angel Jude Reyes Suarez. Insurance Management System 1.0 is vulnerable to SQL injection, which could be exploited by attackers to obtain information about data in the target system...

Insurance Management System SQL注入漏洞

Insurance Management System is an insurance management system from the personal developer Angel Jude Reyes Suarez. Insurance Management System 1.0 is vulnerable to SQL injection, which could be exploited by attackers to obtain information about data in the target system...

Insurance Management System SQL注入漏洞

Insurance Management System is an insurance management system from the personal developer Angel Jude Reyes Suarez. Insurance Management System 1.0 is vulnerable to SQL injection, which could be exploited by attackers to obtain information about data in the target system...

PT-2022-19958 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue allows for SQL Injection via the "/insurance/editClient.php" endpoint, specifically through the client id variable. This could potentially lead to unauthorized access or...

CVE-2022-27124

Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-27124

Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-27124

Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

Sql injection

Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-27124

CVE-2022-27124 affects Insurance Management System 1.0, with a SQL injection vulnerability exposed via the username parameter. The root cause is a flaw in input handling that allows a crafted username to manipulate SQL queries. Public documentation lists this vulnerability across multiple feeds (...