725 matches found
PT-2022-19951
Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the Master.php file, specifically through the f=delete booking parameter. The estimated number of potentiall...
CVE-2022-29741: Improper Neutralization of Special Elements used in an SQL Command
Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=deletefee...
CVE-2022-29745: Improper Neutralization of Special Elements used in an SQL Command
Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=deletetransaction...
CVE-2022-29989: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletebooking...
CVE-2022-29749: Improper Neutralization of Special Elements used in an SQL Command
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...
CVE-2022-29750: Improper Neutralization of Special Elements used in an SQL Command
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...
CVE-2022-29985: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletecategory...
CVE-2022-29986: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletefacility...
CVE-2022-29988: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete...
CVE-2022-29751: Improper Neutralization of Special Elements used in an SQL Command
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteclient...
CVE-2022-29979: Improper Neutralization of Special Elements used in an SQL Command
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deletedesignation...
PT-2022-19816
Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection via the /cms/classes/Master.php?f=delete invoice endpoint. This allows for potential manipulation of database queries. No information is provided about th...
PT-2022-19941
Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /cms/classes/Master.php?f=delete designation API endpoint. This allows for potential manipulation of database queries...
Car Driving School Management System SQL Injection Vulnerability (CNVD-2022-65321)
Car Driving School Management System is a driving school management system. SQL injection vulnerability exists in Car Driving School Managment System, which originates from /cdsms/classes/Master.php?f=delete The vulnerability is caused by the lack of filtering and escaping of SQL data in the id...
CVE-2022-28412
Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...
CVE-2022-28413
Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deleteenrollment...
CVE-2022-28412
Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...
CVE-2022-28028
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...