CVE-2022-28022: Improper Neutralization of Special Elements used in an SQL Command

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...

CVE-2022-28023: Improper Neutralization of Special Elements used in an SQL Command

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

PT-2022-18762

Name of the Vulnerable Software and Affected Versions Purchase Order Management System version 1.0 Description A SQL injection issue was found in the Purchase Order Management System. The vulnerability can be exploited via the /purchase order/classes/Master.php API endpoint, specifically through...

PT-2022-19005

Name of the Vulnerable Software and Affected Versions Car Driving School Management System version 1.0 Description A SQL injection issue was found in the Car Driving School Management System. The vulnerability can be exploited via the /cdsms/classes/Master.php API endpoint, specifically through t...

CVE-2022-28412: Improper Neutralization of Special Elements used in an SQL Command

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...

Simple Chatbot Application SQL Injection Vulnerability (CNVD-2022-70050)

Simple Chatbot Application is a chatbot application. version 1.0 of Simple Chatbot Application is vulnerable to SQL injection, which can be exploited by attackers via the message parameter in master.php...

PT-2022-13637

Name of the Vulnerable Software and Affected Versions College Website Management System version 1.0 Description A vulnerability was found in the College Website Management System, affecting the file "/cwms/classes/Master.php?f=save contact" of the component Contact Handler. This issue leads to...

CVE-2022-1075: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=savecontact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched...

CVE-2021-46427

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-46427

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

PT-2022-12702

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Chatbot Application version 1.0 Description An SQL Injection issue exists via the message parameter in Master.php. This allows for potential exploitation. Recommendations For version 1.0, avoid using the message parameter...

CVE-2021-46427: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-42580: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

YUNUCMS v1.0.7 SQL Injection Vulnerabilities in Master.php and V1.php Pages

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS v1.0.7 Master.php and V1.php pages are vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitiv...

alaskavu.fr XSS vulnerability

Open Bug Bounty ID: OBB-574984 Description| Value ---|--- Affected Website:| alaskavu.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2017-15033

Name of the Vulnerable Software and Affected Versions Bus Booking Script affected versions not specified Description The issue concerns an XSS vulnerability. It can be exploited via the datepicker parameter in the "results.php" endpoint or the spemail parameter in the "admin/new master.php"...

PT-2017-15035

Name of the Vulnerable Software and Affected Versions Bus Booking Script affected versions not specified Description The issue is related to a CSRF vulnerability. It affects the admin/new master.php endpoint. Recommendations At the moment, there is no information about a newer version that contai...

Phorum 3.x PHP Configuration Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1985/info Phorum is a PHP based web forums package. Due to an error in the implementation of forum selection in administrative scripts, any user can view the any PHP script on the target host. This is due to user-supplied...

SimpNews 2.16.2 and Below Multiple SQL Injection Vulnerabilities

No description provided by source. ============================================================================================================== o SimpNews Multiple SQL Injection Vulnerabilities Software : SimpNews version 2.16.2 and below Vendor : http://www.boesch-it.de/ Author : NoGe Contact ...

SimpNews 2.16.2 - Multiple SQL Injections

SimpNews 2.16.2 - Multiple SQL Injections ============================================================================================================== o SimpNews Multiple SQL Injection Vulnerabilities Software : SimpNews version 2.16.2 and below Vendor : http://www.boesch-it.de/ Author : NoGe...