PT-2023-32347 · Unknown · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A critical issue was found, affecting some unknown functionality of the file /classes/Master.php?f=delete reminder. The manipulation of the id argument leads to SQL injection. This...

Projectworlds Leave Management System Project SQL Injection Vulnerability

Projectworlds Leave Management System Project is a leave management system project by Projectworlds India. Projectworlds Leave Management System Project v1.0 suffers from an SQL injection vulnerability that originates in the parameter setcasualleave in the file admin/setleaves.php...

Cacti SQL Injection Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A SQL injection vulnerability exists in Cacti v1.2.25, which stems from...

WordPress WP_Query Stored Credentials

The vulnerability of the WPQuery class in the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to access and disclose stored user credentials...

TRtek Software Education Portal SQL Injection Vulnerability

TRtek Software Education Portal is an education portal from TRtek Software. A SQL injection vulnerability exists in TRtek Software Education Portal prior to version 3.2023.29, which stems from an incorrect neutralization in a SQL statement...

Monitoring and Early Warning System Security Vulnerability

Monitoring and Early Warning System is a monitoring and early warning system of Shanghai CTI Navigation Technology Co. A security vulnerability exists in version 2.2 of the Shanghai CTI Navigation CTI Monitoring and Early Warning System, which originates from a parameter ID in the file...

PT-2023-29213 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the add3 parameter of the header.php resource does not validate the characters received, and they are sent...

CVE-2023-5781

A vulnerability, which was classified as critical, has been found in Tongda OA 2017 11.10. This issue affects the function DELETESTR of the file general/system/resmanage/monitor/deletewebmail.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been...

Projectworlds Online Art gallery project SQL Injection Vulnerability

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. A SQL injection vulnerability exists in Projectworlds Online Art gallery project v1.0, which stems from the lnm parameter in header.php that does not validate incoming characters and sends them...

SourceCodester Sticky Notes SQL Injection Vulnerability

SourceCodester Sticky Notes is a sticky notes application. A security vulnerability exists in SourceCodester Sticky Notes version 1.0, which stems from a SQL injection vulnerability in the parameter note in the file endpoint/delete-note.php...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere V11.10 and earlier versions, v2017, which originates from the presence of an unknown function in general/system/approvecenter/flowsort/flow/delete.php, which can cause a SQL...

Shaanxi Chanming Education Technology Score Query System SQL Injection Vulnerability

Shaanxi Chanming Education Technology Score Query System is a score query system from Shaanxi Chanming Education Technology. A security vulnerability exists in Shaanxi Chanming Education Technology Score Query System version 5.0, which originates from the presence of an unknown function that caus...

CVE-2023-27255

Unauthenticated SQL injection in the DeleteRoomChanges method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

CVE-2023-26583

Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

MySQL Server DoS

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

IDAttend IDWeb SQL Injection Vulnerability

IDAttend IDWeb is a web-based module from IDAttend, Inc. A security vulnerability exists in IDAttend IDWeb version 3.1.052 and prior versions that stems from an unauthenticated SQL injection in the GetRoomChanges method...

Nipah virus Testing Management System SQL Injection Vulnerability

Nipah virus Testing Management System is an online virus diagnostic platform. A security vulnerability exists in version v.1.0 of the PHPGurukul Nipah Virus Testing Management System, which stems from the presence of a SQL injection vulnerability that allows remote attackers to escalate privilege...

IDAttend IDWeb SQL Injection Vulnerability

IDAttend IDWeb is a web-based module from IDAttend, Inc. A security vulnerability exists in IDAttend IDWeb version 3.1.052 and prior versions that stems from an unauthenticated SQL injection in the DeleteRoomChanges method...

IDAttend IDWeb SQL Injection Vulnerability

IDAttend IDWeb is a web-based module from IDAttend, Inc. A security vulnerability exists in IDAttend IDWeb version 3.1.052 and prior versions that stems from an unauthenticated SQL injection in the GetStudentGroupStudents method...

D-Link DAR-7000 Router SQL Injection

The vulnerability of the /importexport.php file in the D-Link DAR-7000 router microprogramming system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...