CVE-2023-1474

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/questionpapers/managequestionpaper.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2023-1152

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Utarit Information Technologies Persolus allows SQL Injection. This issue affects Persolus: before 2.03.93...

PT-2023-16983 · Sourcecodester · Sourcecodester Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracker System version 1.0 Description: A critical issue has been found in the processing of the file medicines/view details.php of the component GET Parameter Handler. The manipulation of the GET argument leads to sql...

SourceCodester Automatic Question Paper Generator System SQL注入漏洞

Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which originates from a SQL injection vulnerability found in...

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which originates from a security issue in the component login page admin/ajax.php?action=login2, which leads...

Pimcore SQL注入漏洞

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce frameworks and product information management applications. A SQL injection vulnerability exists in Pimcor...

Kirin Fortress Machine SQL注入漏洞

Tosec Kirin Fortress Machine is a series of fortress machines from Cosco Kirin Technology Tosec in Beijing, China. A security vulnerability exists in Kirin Fortress Machine version v.1.7-2020-0610, which stems from the presence of a SQL injection vulnerability that can be exploited by an attacker...

Art Gallery Management System SQL注入漏洞

Art Gallery Management System is an art gallery management system by Anuj Kumar, an individual developer. A security vulnerability exists in Art Gallery Management System v1.0, which stems from a SQL injection vulnerability via the viewid parameter...

Simple Art Gallery SQL注入漏洞

Simple Art Gallery is an art gallery application from Simple Art Gallery, Inc. A SQL injection vulnerability exists in Simple Art Gallery version 1.0, which stems from a problem in the file adminHome.php, where manipulation of the parameter socialfacebook can lead to sql injection...

PT-2023-1882 · Unknown · Ruggedcom Crossbow

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM CROSSBOW versions prior to V5.3 Description: A vulnerability has been identified in the audit log form of RUGGEDCOM CROSSBOW, which is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary...

SourceCodester Friendly Island Pizza Website and Ordering System SQL注入漏洞

SourceCodester Friendly Island Pizza Website and Ordering System is the Island Pizza website and ordering system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Friendly Island Pizza Website and Ordering System due to unknown code in the file paypalsuccess.php in the...

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which was discovered to contain an SQL injection vulnerability via the username parameter...

Computer Parts Sales and Inventory System SQL注入漏洞

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. SourceCodester Computer Parts Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from a security issue in the file...

Online Graduate Tracer System SQL注入漏洞

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Graduate Tracer System version 1.0, which stems from an incorrect manipulation of the parameter user resulting in sql injectio...

CVE-2023-27204

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

Student Management System SQL注入漏洞

Student Management System is a simple web-based student management software by Sk.Amir Hamza, an individual developer in Bangladesh. A security vulnerability exists in Online Student Management System v1.0, which originates from multiple SQL injection vulnerabilities via the fromdate and todate...

Best POS Management System SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Personal developer. A security vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability via the id parameter in /kruxton/manageuser.php...

Best POS Management System SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Individual developer. A security vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability via the month parameter in /kruxton/salesreport.php...

PT-2023-19779 · Funadmin · Funadmin

Name of the Vulnerable Software and Affected Versions: Funadmin version 3.2.0 Description: The issue is a SQL injection vulnerability that can be exploited via the id parameter at the "/databases/database/edit" API endpoint. This allows for potential unauthorized access and manipulation of databa...

The vulnerability of the centralized control system for network devices and ports of Advantech iView arises from the lack of protective measures for the SQL query structure, allowing attackers to disclose protected information.

The vulnerability of the centralized control system for network devices and ports of Advantech iView relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...