24 matches found
CVE-2022-36725: Improper Neutralization of Special Elements used in an SQL Command
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /student/dele.php...
CVE-2022-36729: Improper Neutralization of Special Elements used in an SQL Command
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /librarian/del.php...
CVE-2018-9839: Improper Input Validation
An issue was discovered in MantisBT through 1.3.14, and 2.0.0. Using a crafted request on bugreportpage.php modifying the 'mid' parameter, any user with REPORTER access or above is able to view any private issue's details summary, description, steps to reproduce, additional information when cloni...
CVE-2018-14501: Improper Neutralization of Special Elements used in an SQL Command
manager/adminajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "mid=1 AND SLEEP5" substring...