4477 matches found
Sql injection
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/updatestatus.php...
Sql injection
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/managetest.php...
Sql injection
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...
CVE-2022-43125
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...
CVE-2022-43125
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...
CVE-2022-43125
The CVE-2022-43125 entry corresponds to SQL injection in Online Diagnostic Lab Management System v1.0. The vulnerability is triggered via the id parameter at /appointments/manage_appointment.php, caused by insufficient input validation. Affected component: web application endpoint handling appoin...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which was discovered to contain an SQL injection vulnerability via the id parameter of /appointments/updatestatus.php...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which was discovered to contain an SQL injection vulnerability via the id parameter of /admin/tests/managetest.php...
CVE-2022-43126
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/managetest.php...
CVE-2022-43126
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/managetest.php...
CVE-2022-43124
CVE-2022-43124 affects Online Diagnostic Lab Management System v1.0. The vulnerability is a SQL injection in the /admin/?page=user/manage_user endpoint triggered by the id parameter due to insufficient input validation. CVSS v3.1 base score 7.2 (HIGH) with impacts on confidentiality, integrity, a...
CVE-2022-43124
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser...
CVE-2022-43127
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/updatestatus.php...
CVE-2022-43127
CVE-2022-43127 affects Online Diagnostic Lab Management System v1.0, with a SQL injection vulnerability in the id parameter of /appointments/update_status.php. The CVSSv3.1 vector is AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating network vector, low attack complexity, high impact on confidential...
PT-2022-26766 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/tests/manage test.php" API endpoint...
PT-2022-26764 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/?page=user/manage user" API endpoint...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. v1.0 of Online Diagnostic Lab Management System is vulnerable to SQL injection, which stems from a lack of validation of externally entered SQL statements and can be exploited by attackers to to obtain sensitiv...
PT-2022-26765 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/appointments/manage appointment.php" API endpoint...
CVE-2022-43126
CVE-2022-43126 affects Online Diagnostic Lab Management System v1.0. A SQL injection vulnerability exists via the id parameter in /admin/tests/manage_test.php. The CVSS v3.1 base score is 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required: HIGH; no user interact...