CVE-2022-44296

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manageremark.php?id=...

CVE-2022-44295

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assignteam.php?id=...

CVE-2022-44151

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php...

CVE-2022-44151

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php...

CVE-2022-44097

Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...

CVE-2022-45328

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/editmembers.php...

Simple Inventory Management System SQL注入漏洞

Simple Inventory Management System is a simple inventory management system by Carlo Montero Personal Developer. A security vulnerability exists in Simple Inventory Management System v1.0, which stems from its /ims/login.php component that allows an attacker to implement SQL injection...

Sanitization Management System SQL注入漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System v1.0, which originates from an SQL injection via /php-sms/admin/?page=services/manageservice&id=...

Online-shopping-system-advanced SQL注入漏洞

Online-shopping-system-advanced is an online shopping system by Puneeth Reddy H C Individual Developer. A security vulnerability exists in Online-shopping-system-advanced version 1.0, which was discovered to contain a SQL injection vulnerability via the p parameter in /shopping/product.php...

CVE-2022-45214

A cross-site scripting XSS vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter at /php-sms/classes/Login.php...

Purchase Order Management System 代码问题漏洞

Purchase Order Management System is a Purchase Order Management System by Carlo Montero Personal Developer. A code issue vulnerability exists in Purchase Order Management System v1.0, which was discovered via /purchaseorder/admin/?page=systeminfo contains a file upload vulnerability...

Online Tours & Travels Management System 代码问题漏洞

Online Tours & Travels Management System is an online tour management system by Mayuri K. Individual developer. A code issue vulnerability exists in Online Tours & Travels Management System v1.0, which was discovered to contain a file upload vulnerability via /tour/admin/file.php...

Web-Based Student Clearance System 跨站脚本漏洞

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A security vulnerability exists in Web-Based Student Clearance System version v1.0, which was discovered to contain a cross-site scripting XSS vulnerability via Admin/add-admin.ph...

Web Based Quiz System 安全漏洞

Web Based Quiz System is a web based quiz system for janobe individual developers. A vulnerability exists in Web Based Quiz System v1.0, which can be exploited by attackers to obtain a user's password via brute-force cracking...

Book Store Management System 跨站脚本漏洞

Book Store Management System is an online bookstore system by Carlo Montero, an individual developer. A security vulnerability exists in Book Store Management System v1.0, which originates in the booktitle parameter of its /bsmsci/index.php/book component, allowing an attacker to execute arbitrar...

PT-2022-27440 · Unknown · Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0.0 Description: The Human Resource Management System contains a cross-site scripting XSS vulnerability. This issue is triggered via a crafted payload injected into an authentication error message...

CVE-2022-44280

Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...

PT-2022-27163 · Unknown · Sanitization Management System

Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue is related to SQL Injection via the "/php-sms/admin/?page=user/manage user&id=" endpoint. This allows for potential exploitation. No information is provided about the estimated...

PT-2022-26796 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the endDate parameter at the "getOrderReport.php" endpoint. Recommendations: For Billing System...

PT-2022-26249 · Unknown · Klik Socialmediawebsite

Name of the Vulnerable Software and Affected Versions: KLiK SocialMediaWebsite version v1.0.1 Description: The issue concerns SQL Injection via the profile.php file. Recommendations: For version v1.0.1, consider restricting access to the profile.php file until a patch is available. Avoid using...