820 matches found
CVE-2022-40934
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
CVE-2022-40933
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
CVE-2022-40933
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
Sql injection
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
Sql injection
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
Sql injection
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
CVE-2022-40935
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
CVE-2022-40935
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
CVE-2022-40935
CVE-2022-40935 affects Online Pet Shop We App v1.0. The vulnerability is a SQL Injection in /pet_shop/classes/Master.php?f=delete_category,id, with CVSSv3.1 base score 7.2 (HIGH). Exploitation PoC is indicated in the linked metadata; no patch/remediation details are provided in the supplied docum...
CVE-2022-40934
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
CVE-2022-40934
CVE-2022-40934 concerns Online Pet Shop We App v1.0 , with a reported SQL injection in the endpoint /pet_shop/classes/Master.php?f=delete_sub_category,id. The root cause is a lack of input validation/external SQL statement handling in the page parameter handling, enabling attackers to craft input...
CVE-2022-40934
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
CVE-2022-40933
CVE-2022-40933 affects Online Pet Shop We App v1.0 (oretnom23). The vulnerability is a SQL injection in Master.php?f=delete_order,id, caused by lack of validation of externally entered SQL statements. The impact is high (C, I, A all high) with a network attack vector and no user interaction requi...
CVE-2022-40933
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
CVE-2022-40933
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
CVE-2022-40934: Improper Neutralization of Special Elements used in an SQL Command
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
CVE-2022-40935: Improper Neutralization of Special Elements used in an SQL Command
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
Online Pet Shop We App SQL注入漏洞
Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pet Shop We App version 1.0, which originates from a lack of validation of externally entered SQL statements in the...
Online Pet Shop We App SQL注入漏洞
Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pet Shop We App version 1.0, which originates from a lack of validation of externally entered SQL statements in the...
Online Pet Shop We App SQL注入漏洞
Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pet Shop We App v1.0, which originates from /petshop/classes/Master.php?f=deletecategory page id parameter is susceptible to SQL injection...