PT-2022-25919 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, leveraging an arbitrary file upload vulnerability in the /php action/editProductImage.php component...

CVE-2022-41534

Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /phpaction/createOrder.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-42074

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=...

CVE-2022-42073

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...

CVE-2022-42073

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...

Sql injection

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=...

Sql injection

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...

CVE-2022-41512

An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41512

An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41512

An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41513

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php...

Privilege escalation

An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from a security issue with the id parameter in /diagnostic/edittest.php...

CVE-2022-41513

Online Diagnostic Lab Management System v1.0 is affected by a SQL injection vulnerability via the id parameter in /diagnostic/edittest.php. The issue, documented across multiple sources (NVD, Red Hat, CNNVD, etc.), stems from unsanitized user input leading to potentially unauthorized data access ...

CVE-2022-41512

Summary (based on connected documents): The CVE-2022-41512 vulnerability affects Online Diagnostic Lab Management System v1.0, specifically via the /php_action/editFile.php (also referenced as /php action/editFile.php in some sources) arbitrary file upload component. The underlying issue is an ar...

PT-2022-26236 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the /diagnostic/editcategory.php?id= endpoint. This allows for potential manipulation of database queries by injecti...

CVE-2022-42074

CVE-2022-42074 affects Online Diagnostic Lab Management System v1.0, with a SQL Injection flaw in the /diagnostic/editcategory.php?id= endpoint. The root cause is unsanitized input in the id parameter, enabling arbitrary SQL execution. CVSS v3.1 score is 7.2 (HIGH) with Network attack vector, Low...

CVE-2022-42074

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=...

PT-2022-25900 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /php action/editFile.php component...

CVE-2022-41513

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php...