Sql injection

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php...

Privilege escalation

An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Online Diagnostic Lab Management System SQL Injection Vulnerability

Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from a security issue with the id parameter in /diagnostic/edittest.php...

Online Diagnostic Lab Management System SQL Injection Vulnerability

Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from the id parameter in /diagnostic/editcategory.php being susceptible to SQL injection attacks...

CVE-2022-41512

An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-42073: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...

CVE-2022-41513

Online Diagnostic Lab Management System v1.0 is affected by a SQL injection vulnerability via the id parameter in /diagnostic/edittest.php. The issue, documented across multiple sources (NVD, Red Hat, CNNVD, etc.), stems from unsanitized user input leading to potentially unauthorized data access ...

Online Diagnostic Lab Management System Code Vulnerabilities

Online Diagnostic Lab Management System is an online diagnostic lab management system. version v1.0 of Online Diagnostic Lab Management System contains a security vulnerability that can be exploited by attackers to execute arbitrary code via crafted PHP files...

PT-2022-25901

Name of the Vulnerable Software and Affected Versions Online Diagnostic Lab Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/diagnostic/edittest.php" API endpoint. Recommendations For...

PT-2022-26236 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the /diagnostic/editcategory.php?id= endpoint. This allows for potential manipulation of database queries by injecti...

PT-2022-26235 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the "/diagnostic/editclient.php?id=" API endpoint. This allows for potential manipulation of database queries by...

CVE-2022-42073

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...

CVE-2022-42074

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=...

CVE-2022-42074

CVE-2022-42074 affects Online Diagnostic Lab Management System v1.0, with a SQL Injection flaw in the /diagnostic/editcategory.php?id= endpoint. The root cause is unsanitized input in the id parameter, enabling arbitrary SQL execution. CVSS v3.1 score is 7.2 (HIGH) with Network attack vector, Low...

CVE-2022-41512

Summary (based on connected documents): The CVE-2022-41512 vulnerability affects Online Diagnostic Lab Management System v1.0, specifically via the /php_action/editFile.php (also referenced as /php action/editFile.php in some sources) arbitrary file upload component. The underlying issue is an ar...

CVE-2022-41513

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php...

CVE-2022-42073

Vulnerability (CVE-2022-42073) : Online Diagnostic Lab Management System v1.0 is vulnerable to an SQL Injection via the /diagnostic/editclient.php?id= parameter. The issue is repeatedly described across multiple connected sources (CNVD/CNNVD, NVD, Red Hat, CVE listing, etc.), with the root cause ...

Online Diagnostic Lab Management System SQL Injection Vulnerability

Online Diagnostic Lab Management System is an online diagnostic lab management system. SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from the /diagnostic/editclient.php The id parameter in /diagnostic/editclient.php is vulnerable to SQL...

CVE-2022-41513: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php...

CVE-2022-42074: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=...