CVE-2022-29680

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zudel...

CVE-2022-29661

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save...

CVE-2022-29667

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via restoring deleted photos...

CVE-2022-28410

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.php?f=deleteagent...

CVE-2022-28411

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=agents/manageagent...

CVE-2022-28030

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteestate...

CVE-2022-28028

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...

CVE-2022-27368

Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceLists.phpzhuan...

CVE-2022-27367

Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceTopic.phpdel...

CVE-2006-2846

Cross-site scripting XSS vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

Cybozu Garoon Information Disclosure Vulnerability (CNVD-2024-29673)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An information disclosure vulnerability exists in Cybozu Garoon. The vulnerability stems from insufficient...

CVE-2024-3258

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/addactivity.php. The manipulation of the argument title/description/start/end leads to sql injection. It is possible to initiate...

Simple Real Estate Portal System SQL Injection Vulnerability (CNVD-2023-98207)

Simple Real Estate Portal System is a real estate portal system. A SQL injection vulnerability exists in Simple Real Estate Portal System v1.0, which originates from the parameter id of the file viewestate.php that lacks validation of externally entered SQL statements. An attacker can exploit thi...

CVE-2023-5805

CVE-2023-5805 corresponds to a SQL injection in SourceCodester Simple Real Estate Portal System 1.0, caused by unsafely handling the id parameter in view_estate.php. Exploitation can be remote and public disclosures exist. Affected component: view_estate.php (and variations in naming). Root cause...

CVE-2023-3522

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...

CVE-2023-3522

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...

CVE-2023-3522

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection.This issue affects License Portal System: before 1.48...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection.This issue affects License Portal System: before 1.48...

CVE-2023-3522 SQLi in a2 License Portal System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...

CVE-2023-3522 SQLi in a2 License Portal System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...