CVE-2022-30375: Incorrect Default Permissions

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...

CVE-2022-30381: Undefined Security Weakness

Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggersmerch/classes/Master.php?f=deleteimg...

CVE-2022-29745

Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=deletetransaction...

CVE-2022-29745

Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=deletetransaction...

CVE-2022-29749

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...

CVE-2022-29985

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletecategory...

CVE-2022-29749

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...

CVE-2022-29979

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deletedesignation...

CVE-2022-29988

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteclient...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deletedesignation...

CVE-2022-29985

CVE-2022-29985 affects Online Sports Complex Booking System 1.0. The vulnerability is a SQL Injection in scbs/classes/Master.php?f=delete_category caused by unvalidated input in the id parameter. This could allow an attacker to manipulate SQL queries and access or modify database data. Exploitati...

CVE-2022-29988

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete...

CVE-2022-29749

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...

CVE-2022-29749

CVE-2022-29749 affects Simple Client Management System 1.0. The vulnerability is an SQL injection in the delete_invoice path handled via /cms/classes/Master.php?f=delete_invoice, originating from lack of validation of input (id parameter). The issue is confirmed across multiple sources (NVD/CNVD/...

CVE-2022-29986: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletefacility...

CVE-2022-29745: Improper Neutralization of Special Elements used in an SQL Command

Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=deletetransaction...

CVE-2022-29749: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...

CVE-2022-29989: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletebooking...

CVE-2022-29979: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deletedesignation...