4477 matches found
CVE-2022-43162
Online Diagnostic Lab Management System v1.0 is affected by a SQL injection vulnerability in the id parameter of /tests/view_test.php. The issue arises from improper SQL handling in the view_test routine, enabling arbitrary data exposure or modification. The CVE entry has a high severity (CVSS v3...
CVE-2022-43163
Online Diagnostic Lab Management System v1.0 has a SQL injection in /clients/view_client.php (id parameter). CVE-2022-43163: CVSS v3.1 base 7.2 (HIGH) with NETWORK/LOW complexity and HIGH privileges required; impacts to confidentiality, integrity, and availability are HIGH. Multiple sources corro...
CVE-2022-43162
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/viewtest.php...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. v1.0 of Online Diagnostic Lab Management System has a security vulnerability that stems from the inclusion of SQL injection via the id parameter in /tests/viewtest.php. No detailed vulnerability details are...
PT-2022-26779 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/tests/view test.php" API endpoint. Recommendations: For...
CVE-2022-43163
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/viewclient.php...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. v1.0 of Online Diagnostic Lab Management System has a security vulnerability that originates from a SQL injection via the /clients/viewclient.php in the id parameter in /clients/viewclient.php contains SQL...
CVE-2022-43163
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/viewclient.php...
CVE-2022-43162
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/viewtest.php...
CVE-2022-43135
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...
CVE-2022-43135
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...
Sql injection
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...
GitHub Security Lab: [python] TarSlip vulnerability improvements
Vulnerability description not provided...
CVE-2022-43135
The CVE-2022-43135 entry concerns Online Diagnostic Lab Management System v1.0 with a SQL injection flaw in the login flow. Affected component: /diagnostic/login.php, where the username parameter is injectable. Root cause: unsafeguarded handling of user input enabling arbitrary SQL execution. Imp...
CVE-2022-43135
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...
PT-2022-26768 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the "/diagnostic/login.php" API endpoint. Recommendation...
CVE-2022-43135
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. A security vulnerability exists in Online Diagnostic Lab Management System v1.0, which stems from the manipulation of the username parameter in its /diagnostic/login.php component that allows an attacker to...
The vulnerability of the web application’s Online Diagnostic Lab Management System lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL queries.
The vulnerability of the Web application, the Online Diagnostic Lab Management System, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the...