Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...

Sql injection

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...

CVE-2022-28416: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

CVE-2022-28414: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...

CVE-2022-28030: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteestate...

CVE-2022-28028: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...

CVE-2022-28415: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...

CVE-2022-28413: Improper Neutralization of Special Elements used in an SQL Command

Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deleteenrollment...

CVE-2022-28023: Improper Neutralization of Special Elements used in an SQL Command

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

CVE-2022-28029: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...

CVE-2022-28022: Improper Neutralization of Special Elements used in an SQL Command

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...

CVE-2022-28412: Improper Neutralization of Special Elements used in an SQL Command

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...

CVE-2022-28417: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

Simple Chatbot Application SQL Injection Vulnerability (CNVD-2022-70050)

Simple Chatbot Application is a chatbot application. version 1.0 of Simple Chatbot Application is vulnerable to SQL injection, which can be exploited by attackers via the message parameter in master.php...

CVE-2022-1075: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=savecontact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched...

CVE-2021-46427

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-46427

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-46427: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-42580: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

YUNUCMS v1.0.7 SQL Injection Vulnerabilities in Master.php and V1.php Pages

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS v1.0.7 Master.php and V1.php pages are vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitiv...