3890 matches found
Macrob7 Macs Framework Cms 安全漏洞
Macrob7 Macs Framework Cms is an open source Cms framework by the individual developer Macdonald Terrence Robinson. A security vulnerability exists in Macrob7 Macs CMS version 1.1.4f and earlier, which stems from the presence of a SQL injection vulnerability that could allow a remote attacker to...
Desdev DedeCMS SQL注入漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. DedeCMS 5.7.112-UTF8 has a SQL injection...
PHPGurukul Small CRM SQL注入漏洞
Small CRM is a customer relationship management system. A SQL injection vulnerability exists in Small CRM, which stems from a lack of validation of externally-entered SQL statements in the change password handler. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...
WordPress Advanced Page Visit Counter plugin <= 8.0.6 - Auth. SQL Injection (SQLi) vulnerability
Auth. SQL Injection SQLi vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Advanced Page Visit Counter versions = 8.0.6...
Advocate Office Management System SQL注入漏洞
Advocate Office Management System is an office management system by the individual developer mayurik. A SQL injection vulnerability exists in Advocate Office Management System version 1.0, which originates from a SQL injection vulnerability in the file /control/adds.php...
Church Management System 安全漏洞
Church Management System is a church management system. A security vulnerability exists in version 1.0 of the Church Management System, which stems from an SQL injection vulnerability in the Gender parameter of the /admin/addsundaysch.php file...
PT-2024-24000 · Solwin Infotech · Solwin Infotech User Activity Log
Name of the Vulnerable Software and Affected Versions: Solwin Infotech User Activity Log versions 1.8 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation b...
Church Management System SQL注入漏洞
Church Management System is a church management system. A SQL injection vulnerability exists in version 1.0 of the Church Management System, which is caused by a SQL injection vulnerability in the password parameter of the login.php file...
CVE-2024-31507
Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request" parameter in admin/fetchgendercs.php...
CVE-2024-3458
A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/addikev2.php. The manipulation of the argument TunnelId leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2024-31260
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2...
Online Courseware SQL注入漏洞
DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from a SQL injection attack in the contact parameter of the admin/saveditt.php file...
Online Library System SQL注入漏洞
Online Library System is an open source online library system. A SQL injection vulnerability exists in SourceCodester Online Library System version 1.0, which is caused by a SQL injection vulnerability in the IBSN parameter of the admin/books/controller.php file...
SourceCodester Aplaya Beach Resort Online Reservation System SQL注入漏洞
Aplaya Beach Resort Online Reservation System is the online room reservation system for Aplaya Beach Resort. SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 has a SQL injection vulnerability that originates from an SQL injection in the id parameter of the...
CVE-2024-3314
A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php. The manipulation leads to sql injection. The attack may be initiated remotely. The identifier VDB-259385 was...
PT-2024-24670 · Sourcecodester · Sourcecodester Internship Portal Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue was found in the SourceCodester Internship Portal Management System. The problem is related to an unknown function of the file admin/edit admin...
PT-2024-24475 · Unknown · Campcodes Online Patient Record Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Patient Record Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/login.php. The manipulation of the password argument leads to sql injection...
PT-2024-24470 · Sourcecodester · Sourcecodester Php Task Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester PHP Task Management System version 1.0 Description: A critical issue has been found in the SourceCodester PHP Task Management System, affecting an unknown functionality of the file task-details.php. The manipulation of the task...
CVE-2024-23116 Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability
Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateLCARelation...