CVE-2022-43126: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/managetest.php...

CVE-2022-43127

CVE-2022-43127 affects Online Diagnostic Lab Management System v1.0, with a SQL injection vulnerability in the id parameter of /appointments/update_status.php. The CVSSv3.1 vector is AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating network vector, low attack complexity, high impact on confidential...

CVE-2022-43127

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/updatestatus.php...

CVE-2022-43126

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/managetest.php...

CVE-2022-43124

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser...

CVE-2022-43126

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/managetest.php...

CVE-2022-43124

CVE-2022-43124 affects Online Diagnostic Lab Management System v1.0. The vulnerability is a SQL injection in the /admin/?page=user/manage_user endpoint triggered by the id parameter due to insufficient input validation. CVSS v3.1 base score 7.2 (HIGH) with impacts on confidentiality, integrity, a...

CVE-2022-43124

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser...

CVE-2022-43126

CVE-2022-43126 affects Online Diagnostic Lab Management System v1.0. A SQL injection vulnerability exists via the id parameter in /admin/tests/manage_test.php. The CVSS v3.1 base score is 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required: HIGH; no user interact...

PT-2022-26764 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/?page=user/manage user" API endpoint...

PT-2022-26765 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/appointments/manage appointment.php" API endpoint...

Online Diagnostic Lab Management System SQL Injection Vulnerability

Online Diagnostic Lab Management System is an online diagnostic lab management system. v1.0 of Online Diagnostic Lab Management System is vulnerable to SQL injection, which stems from a lack of validation of externally entered SQL statements and can be exploited by attackers to to obtain sensitiv...

Online Diagnostic Lab Management System SQL Injection Vulnerability

Online Diagnostic Lab Management System is an online diagnostic lab management system. v1.0 of Online Diagnostic Lab Management System is vulnerable to SQL injection, which stems from a lack of validation of externally entered SQL statements and can be exploited by attackers to to obtain sensitiv...

CVE-2022-43125: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...

CVE-2022-43127: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/updatestatus.php...

CVE-2022-43127

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/updatestatus.php...

GitHub Security Lab: C/C++: Command injection via wordexp

Vulnerability description not provided...

GitHub Security Lab: [CPP]: Add query for CWE-125 Out-of-bounds Read with different interpretation of the string when use mbtowc

Vulnerability description not provided...

MiniDVBLinux 5.4 Config Download Exploit

Summary MiniDVBLinuxTM Distribution MLD. MLD offers a simple way to convert a standard PC into a Multi Media Centre based on the Video Disk Recorder VDR by Klaus Schmidinger. Features of this Linux based Digital Video Recorder: Watch TV, Timer controlled recordings, Time Shift, DVD and MP3 Replay...

MiniDVBLinux 5.4 Remote Root Command Execution Vulnerability

Summary MiniDVBLinuxTM Distribution MLD. MLD offers a simple way to convert a standard PC into a Multi Media Centre based on the Video Disk Recorder VDR by Klaus Schmidinger. Features of this Linux based Digital Video Recorder: Watch TV, Timer controlled recordings, Time Shift, DVD and MP3 Replay...