Purchase Order Management System SQL注入漏洞

Purchase Order Management System is a purchase order management system. Purchase Order Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

CVE-2022-28021

Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...

CVE-2022-28022

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...

CVE-2022-28023

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

CVE-2022-28023

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

CVE-2022-28021

Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...

CVE-2022-28022

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...

CVE-2022-28021

Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...

CVE-2022-28023

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

CVE-2022-28022

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...

Sql injection

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

Remote code execution

Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...

Sql injection

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...

CVE-2022-28022

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...

CVE-2022-28021

Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...

CVE-2022-28021

CVE-2022-28021 affects Purchase Order Management System v1.0. The Red Hat, NVD, CVE listing and related sources document a remote code execution (RCE) vulnerability accessible via the web path: /purchase_order/admin/?page=user. The descriptions consistently state an RCE condition but do not provi...

CVE-2022-28022

CVE-2022-28022 concerns the Purchase Order Management System v1.0, where a SQL injection vulnerability exists in the delete_item path exposed by /purchase_order/classes/Master.php?f=delete_item. The issue arises from insecure handling of input in the affected function, enabling an attacker to cra...

CVE-2022-28023

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

CVE-2022-28023

CVE-2022-28023 affects Purchase Order Management System v1.0. The vulnerability is a SQL injection in the endpoint /purchase_order/classes/Master.php?f=delete_supplier, allowing potentially arbitrary SQL execution. The CVSS metrics in the initial entry indicate a high/critical impact (C/I/A CONFI...

Purchase Order Management System SQL注入漏洞

Purchase Order Management System is a purchase order management system. Purchase Order Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...