1215 matches found
PT-2022-17838 · Sourcecodester · Sourcecodester Online Admission System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Admission System affected versions not specified Description: A critical issue has been found in the component POST Parameter Handler, where the manipulation of the shift argument leads to SQL injection. The attack can b...
Online Admission System SQL注入漏洞
Online Admission System is an online admission system by the individual developer RASHMI KUMARI. The Online Admission System suffers from an SQL injection vulnerability that stems from an unknown function in its POST parameter handling component that operates on the parameter shift, which could...
CVE-2022-2643: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Online Admission System and classified as critical. This vulnerability affects unknown code of the component POST Parameter Handler. The manipulation of the argument shift leads to sql injection. The attack can be initiated remotely. The exploit ha...
Design/Logic Flaw
The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter “Device ID,” which accepts arbitrary device IDs...
CVE-2022-31794
An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 Control Center devices before 8.1A SP02 P04. The vulnerability resides in the requestTempFile function in hwview.php. An attacker is able to influence the unitName POST parameter and inject special characters such as semicolons,...
CVE-2022-1800: Improper Neutralization of Special Elements used in an SQL Command
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability...
Afian Filerun SQL Injection Vulnerability (CNVD-2022-68943)
Afian FileRun is a full-featured web-based file manager. sql injection vulnerability exists in Afian Filerun version 20220202, which stems from a lack of cleanup of the POST parameter metadata in the /?module=fileman§ion=get&page=grid page. An attacker could exploit this vulnerability to cause SQ...
CVE-2022-30469
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman§ion=get&page=grid leads to SQL injection...
Sql injection
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman§ion=get&page=grid leads to SQL injection...
CVE-2022-30469
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman§ion=get&page=grid leads to SQL injection...
CVE-2022-30469: Improper Neutralization of Special Elements used in an SQL Command
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman§ion=get&page=grid leads to SQL injection...
The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional diagnostic devices lies in the improper checking of POST request parameters. This allows a perpetrator to cause malfunctions during maintenance or execute arbitrary codes.
The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional measuring devices is related to incorrect verification of POST request parameters. Exploiting this vulnerability can allow an attacker to trigger a service failure or execute arbitrary code...
Nokia Broadcast Message Center SQL Injection Vulnerability (CNVD-2022-68946)
Nokia Broadcast Message Center is a broadcast message center for Nokia Finland to manage alerts. An SQL injection vulnerability exists in Nokia Broadcast Message Center 11.1.0 and earlier versions, which originates in /owui/block/send-receive-updates extIdentifier HTTP POST parameter is missing...
Sql injection
Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates for the Manage Alerts page via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user,...
Nokia Broadcast Message Center SQL注入漏洞
Nokia Broadcast Message Center is a broadcast message center for Nokia Finland to manage alerts. An SQL injection vulnerability exists in Nokia Broadcast Message Center 11.1.0 and earlier versions, which originates in /owui/block/send-receive-updates extIdentifier HTTP POST parameter is missing...
CVE-2021-42897
A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...
CVE-2021-42897
A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...
CVE-2022-30378
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/viewpost&id=...
Siemens SICAM T 安全漏洞
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...
Siemens SICAM T 输入验证错误漏洞
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...