255 matches found
Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11186)
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /classes/Master .php?f=deletecategory location of the id parameter has a...
Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11188)
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to a SQL injection vulnerability in the /classes/Master .php?f=deletestockout location has an SQL injection issue wit...
Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11187)
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. .php?f=deletestockin location has a SQL injection issue with the id parameter. No detailed vulnerability details are available at this time...
Fast Food Ordering System 跨站脚本漏洞
Fast Food Ordering System is a fast food ordering system by the individual developer Carlo Montero. Fast Food Ordering System suffers from a cross-site scripting vulnerability that stems from the discovery of a cross-site scripting vulnerability via the date parameter...
Student Information System SQL注入漏洞
Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Student Information System. An attacker can exploit this...
Simple E-Learning System Arbitrary File Download Vulnerability
Simple E-Learning System is a simple e-learning system by Carlo Montero's personal developer. simple E-Learning System is vulnerable to an arbitrary file download vulnerability, which stems from a lack of validation of external input data in the downloadFiles.php parameter download. validation. A...
Simple E-Learning System Cross-Site Scripting Vulnerability (CNVD-2023-11440)
Simple E-Learning System is a simple e-learning system from Carlo Montero's personal developer. Simple E-Learning System is vulnerable to a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter Bio in the file...
Fast Food Ordering System 跨站脚本漏洞
Fast Food Ordering System is a fast food ordering system by the individual developer Carlo Montero. Fast Food Ordering System suffers from a cross-site scripting vulnerability that stems from an unknown part of its Menu List component code that manipulates the parameter Description to cause...
Wedding Hall Booking System 跨站脚本漏洞
Wedding Hall Booking System is a simple PHP-titled wedding hall booking system by the individual developer Carlo Montero. Wedding Hall Booking System suffers from a cross-site scripting vulnerability that stems from the manipulation of the parameter Message by an unknown function in the Contect...
Warehouse Management System SQL注入漏洞
Warehouse Management System is a warehouse management system by Carlo Montero Personal Developer. Warehouse Management System v1.0 contains a SQL injection vulnerability that can be exploited by an attacker to retrieve all information from the system...
Simple E-Learning System classRoom.php SQL Injection Vulnerability
Simple e-Learning System is a simple e-learning system from Carlo Montero's personal developer. version v1.0 of Simple E-Learning System is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the classRoom.php file. An attacker could use the...
Simple e-Learning System Cross-Site Scripting Vulnerability
Simple e-Learning System is a simple e-learning system from Carlo Montero's personal developer. version 1.0 of Simple e-Learning System is vulnerable to a cross-site scripting vulnerability that stems from the lack of a Bio parameter in the file /vcs/claireblake to filter the user-supplied data a...
Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77045)
Product Show Room Site is a kind of product show room website by Carlo Montero's personal developer. product show room site v1.0 version exists SQL injection vulnerability, the vulnerability originates from the existence of the id parameter in /psrs/?p=products/viewproduct&id SQL injection, an...
Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77046)
Product Show Room Site is a product showroom website from Carlo Montero's personal developer. Product Show Room Site v1.0 is vulnerable to SQL injection, which originates from a SQL injection in the /psrs/classes/Master.php?f=deleteproduct The vulnerability is caused by SQL injection of the id...
Prison Management System SQL Injection Vulnerability (CNVD-2022-48403)
Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates in the application /pms/admin/visits/viewvisit.php in the id parameter in /pms/admin/visits/viewvisit.php is missing the S...
Prison Management System SQL Injection Vulnerability (CNVD-2022-48399)
Prison Management System is a prison management system from Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the id in /pms/admin/cells/viewcell.php in the application. parameter in /pms/admin/cells/viewcell.php lacks a...
Prison Management System SQL Injection Vulnerability (CNVD-2022-48396)
Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates from the application /pms/admin/user/manageuser.php in the id parameter in /pms/admin/user/manageuser.php is missing the S...
Prison Management System SQL Injection Vulnerability (CNVD-2022-48394)
Prison Management System is a prison management system by Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates from the application /pms/admin/inmates/manage The vulnerability is caused by the lack of SQL data filtering escape in the i...
Prison Management System SQL Injection Vulnerability (CNVD-2022-48395)
Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/inmates/managerecord. php in the id parameter lack of SQL data filter escaping, an attack...
Prison Management System SQL Injection Vulnerability (CNVD-2022-48390)
Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates in the application /pms/admin/cells/managecell.php in the id parameter in /pms/admin/cells/managecell.php is missing the S...