Sql injection

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

PT-2022-8650 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection via the "/ucenter/repass.php" API endpoint, specifically through the name parameter. This allows for potential exploitation. Recommendations: For MKCMS version 6.2, as a...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

PT-2022-8648 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection. It occurs via the /ucenter/reg.php API endpoint, specifically through the name parameter. Recommendations: For MKCMS version 6.2, as a temporary workaround, consider...

CVE-2020-22818: Improper Neutralization of Special Elements used in an SQL Command

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22820: Improper Neutralization of Special Elements used in an SQL Command

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

Official Car Rental System Bypass Security Restrictions

The vulnerability in the implementation of the account.php, login.php, and bookcar.php scripts of the Official Car Rental System relates to the lack of measures taken to protect the SQL query structure when processing parameters such as uname, pass, and id. Exploiting this vulnerability allows a...

PT-2022-26746 · Unknown · Vehicle Booking System

Name of the Vulnerable Software and Affected Versions: Vehicle Booking System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the v name parameter in the admin-add-vehicle.php file...

IBAX go-ibax SQL注入漏洞

IBAX go-ibax is a blockchain system platform from IBAX Corporation. IBAX go-ibax suffers from a SQL injection vulnerability that originates from some unknown functionality in file/api/v2/open/rowsInfo, where manipulation of the parameter tablename results in SQL injection...

CVE-2022-43166

A stored cross-site scripting XSS vulnerability in the Global Entities feature /index.php?module=entities/entities of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New Entity"...

CVE-2022-43169

A stored cross-site scripting XSS vulnerability in the Users Access Groups feature /index.php?module=usersgroups/usersgroups of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New...

CVE-2022-43164

A stored cross-site scripting XSS vulnerability in the Global Lists feature /index.php?module=globallists/lists of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add"...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Global Entities feature /index.php?module=entities/entities of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New Entity"...

Rukovoditel 跨站脚本漏洞

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management, customer relationship management and other features. A cross-site scripting vulnerability exists in Rukovoditel version 3.2.1, which stems from the Name...

CVE-2022-43169: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Users Access Groups feature /index.php?module=usersgroups/usersgroups of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New...

Rukovoditel 跨站脚本漏洞

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management, customer relationship management and other features. A cross-site scripting vulnerability exists in Rukovoditel version 3.2.1, which stems from the vulnerabili...

CVE-2022-43164: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Global Lists feature /index.php?module=globallists/lists of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add"...

PT-2022-26786 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A stored cross-site scripting XSS issue exists in the Users Access Groups feature, specifically in the /index.php?module=users groups/users groups API endpoint, allowing authenticated attackers to execut...