CVE-2022-30413

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=deleteapplication...

CVE-2022-30413

The CVE-2022-30413 entry affects Covid-19 Travel Pass Management System v1.0, with a SQL Injection vulnerability in the application module /ctpms/classes/Master.php?f=delete_application. The underlying root cause is lack of input filtering/escaping for the parameter, enabling potentially dangerou...

CVE-2022-30414

The CVE-2022-30414 entry concerns Covid-19 Travel Pass Management System v1.0, which is reported to be vulnerable to SQL Injection through the parameter in /ctpms/admin/?page=applications/view_application&id=. The connected records consistently describe an SQL injection vulnerability originating ...

CVE-2022-30414

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=applications/viewapplication&id=...

CVE-2022-30415

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/applications/updatestatus.php?id=...

CVE-2022-30415

CVE-2022-30415 affects Covid-19 Travel Pass Management System v1.0, with a confirmed SQL injection vulnerability in /ctpms/admin/applications/update_status.php?id=. The root cause cited in CNVD/related records is lack of input filtering/escaping, enabling attackers to inject SQL. Multiple sources...

CVE-2022-30417

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manageuser&id=...

CVE-2022-30417

The CVE-2022-30417 entry applies to Covid-19 Travel Pass Management System v1.0 and is caused by a SQL Injection in the parameterized request at ctpms/admin/?page=user/manage_user&id=. The connected documents confirm the vulnerable component is the web application entry point for user management,...

CVE-2022-30408

Covid-19 Travel Pass Management System v1.0 is vulnerable to file deletion via /ctpms/classes/Master.php?f=deleteimg...

CVE-2022-30408

CVE-2022-30408 affects Covid-19 Travel Pass Management System v1.0. The root cause is missing file type validation in /ctpms/classes/Master.php?f=delete_img, allowing an attacker to delete arbitrary files. The issue is evidenced across multiple databases and security trackers (NVD, Red Hat, CNVD,...

CVE-2022-30415: Improper Neutralization of Special Elements used in an SQL Command

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/applications/updatestatus.php?id=...

CVE-2022-30411: Improper Neutralization of Special Elements used in an SQL Command

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=individuals/viewindividual&id=...

CVE-2022-30413: Improper Neutralization of Special Elements used in an SQL Command

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=deleteapplication...

Covid-19 Travel Pass Management System SQL注入漏洞

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. Covid-19 Travel Pass Management System v1.0 has a SQL injection vulnerability, which originates from ctpms/admin/?page=user/manageuser&id=lack of filtering and escaping for parameters, which can be exploited by...

Covid-19 Travel Pass Management System SQL注入漏洞

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. It provides an online platform for individuals to submit travel passes within the Covid-19 restrictions. The Covid-19 Travel Pass Management System suffers from an SQL injection vulnerability that originates in...

Covid-19 Travel Pass Management System 安全漏洞

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. It provides an online platform for individuals to submit travel passes within the Covid-19 restrictions. A security vulnerability exists in the Covid-19 Travel Pass Management System that originates in...

CVE-2022-30414: Improper Neutralization of Special Elements used in an SQL Command

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=applications/viewapplication&id=...

CVE-2022-30417: Improper Neutralization of Special Elements used in an SQL Command

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manageuser&id=...

Bus Pass Management System Insecure Direct Object Reference Vulnerability

Bus Pass Management System is a bus pass management system. version 1.0 of Bus Pass Management System is vulnerable to an insecure direct object reference vulnerability that stems from the viewid parameter failing to check user permissions on all target object accesses. An attacker could exploit...

Covid-19 Travel Pass Management System SQL注入漏洞

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. It provides an online platform for individuals to submit travel passes within the Covid-19 restrictions. The Covid-19 Travel Pass Management System suffers from an SQL injection vulnerability that originates in...