909 matches found
Sql injection
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /student/dele.php...
Sql injection
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php...
CVE-2022-36727
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php...
CVE-2022-36727
CVE-2022-36727 affects Library Management System v1.0, where a SQL injection vulnerability exists in the /staff/delete.php endpoint via the bookId parameter. The vulnerability exposes potential disclosure, modification, and disruption of data (per the CVSS 3.1 base score of 9.8, with HIGH confide...
CVE-2022-36722
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the title parameter at /librarian/history.php...
CVE-2022-36722
CVE-2022-36722 affects Library Management System v1.0, where a SQL injection can be triggered via the title parameter in /librarian/history.php. Root cause: improper handling of the title input allowing SQL manipulation, leading to potential unauthorized data access and tampering. Impact (per CVS...
CVE-2022-36728
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /staff/delstu.php...
CVE-2022-36728
CVE-2022-36728 affects Library Management System v1.0. The vulnerability is a SQL injection in the RollNo parameter of /staff/delstu.php. Root cause: improper handling of input leading to SQL injection. Impact is aligned with high/critical severity in the supplied metrics. Affected product/versio...
CVE-2022-36725
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /student/dele.php...
CVE-2022-36725
CVE-2022-36725 affects Library Management System v1.0, where a SQL injection vulnerability exists in the M_Id parameter of the /student/dele.php endpoint. The NVD entry reports a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no user interaction, and high impact on confidentia...
CVE-2022-36729
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /librarian/del.php...
CVE-2022-36729
CVE-2022-36729 affects Library Management System v1.0, where a SQL injection is exposed via the M_Id parameter in /librarian/del.php. The vulnerability stems from unsafely handling the M_Id input, enabling attacker-controlled SQL execution. The CVSS 3.1 data in the initial record indicates a crit...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.4 due to a SQL injection in the MId parameter of its /librarian/del.php...
PT-2022-23587 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: A SQL injection issue was found in the Library Management System. The vulnerability can be exploited via the RollNo parameter at the "/staff/delstu.php" API endpoint. Recommendations: For...
PT-2022-23585 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the M Id parameter at the "/student/dele.php" API endpoint. Recommendations: For Library...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.3 due to an SQL injection in the RollNo parameter of its /staff/delstu.php...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.1 due to a SQL injection in the MId parameter of its /student/dele.php...
PT-2022-23584 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the title parameter at the "/librarian/history.php" API endpoint. Recommendations: For Library...
PT-2022-23586 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: A SQL injection issue was found in the Library Management System via the bookId parameter at the "/staff/delete.php" API endpoint. Recommendations: For Library Management System version 1.0,...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code for attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.2 due to a SQL injection in the bookId parameter of its...