CVE-2022-43062

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteappointment...

CVE-2022-43062

CVE-2022-43062 affects the Online Diagnostic Lab Management System v1.0. A SQL injection flaw exists via the id parameter in the endpoint /classes/Master.php?f=delete_appointment, as reported across multiple sources. The CVSS v3.1 score is 7.2 (HIGH) with network attack vector, low attack complex...

CVE-2022-43068

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

CVE-2022-43066

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=deletemessage...

CVE-2022-43066

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=deletemessage...

Sql injection

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

Sql injection

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=deletemessage...

CVE-2022-43227

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/viewappointment...

CVE-2022-43227

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/viewappointment...

Sql injection

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/viewappointment...

Sql injection

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/viewappointment...

CVE-2022-43227

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/viewappointment...

CVE-2022-43066

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=deletemessage...

CVE-2022-43227

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/viewappointment...

CVE-2022-43226

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/viewappointment...

CVE-2022-43068

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

CVE-2022-43066

CVE-2022-43066 applies to Online Diagnostic Lab Management System v1.0, with a SQL injection vulnerability exploitable via the id parameter in /odlms/classes/Master.php?f=delete_message. The issue stems from improper handling/validation of user-supplied input, allowing attacker-controlled SQL on ...

CVE-2022-43068

CVE-2022-43068 affects Online Diagnostic Lab Management System v1.0, with a SQL injection flaw in id parameter of /classes/Master.php?f=delete_reservation. The issue stems from improper input handling; CVSS v3.1 metrics indicate a HIGH impact (C/H/I/A) with a base score of 7.2, network attack vec...

PT-2022-26802 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/odlms/admin/?page=appointments/view appointment" endpoin...

CVE-2022-43125

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...