8644 matches found
desafio_buzz_woody SQL注入漏洞
desafiobuzzwoody is an application by Bruno Mattoso Gonçalves Personal Developer. A SQL injection vulnerability exists in desafiobuzzwoody that stems from unknown processing that operates to cause SQL injection...
Online Food Ordering System SQL注入漏洞
Online Food Ordering System is an online food ordering system. an SQL injection vulnerability exists in Online Food Ordering System, which stems from a problem with some unknown functions in the file viewprod.php, where manipulation of the parameter id can lead to sql injection. No details of the...
krail-jpa SQL注入漏洞
krail-jpa is a KrailOrg open source module for use with Krail. The module provides JPA functionality . A SQL injection vulnerability exists in krail-jpa versions prior to 0.9.1, which stems from an unknown partial impact and operates to cause SQL injection...
PT-2023-10149 · Unknown · Agy Pontifex.Http
Name of the Vulnerable Software and Affected Versions: agy pontifex.http versions prior to 0.1.0 Description: A critical issue has been found in the agy pontifex.http software, affecting the lib/Http.coffee file, which can lead to sql injection. Recommendations: For versions prior to 0.1.0, upgra...
CVE-2022-46954
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletetransaction...
Online Student Enrollment System SQL注入漏洞
Online Student Enrollment System is an online student enrollment system developed by Lyndon Bermoy, an individual developer. A security vulnerability exists in Online Student Enrollment System v1.0, which stems from a username parameter in its /studentenrollment/admin/login.php file that allows a...
Dynamic Transaction Queuing System SQL注入漏洞
Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, an individual developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0, which stems from the id parameter of its /admin/ajax.php?action=deleteuploads component...
PT-2023-10000 · Unknown · Aeharding Classroom-Engagement-System
Name of the Vulnerable Software and Affected Versions: aeharding classroom-engagement-system affected versions not specified Description: A critical issue was found, allowing for SQL injection through some unknown functionality. The manipulation can be performed remotely. Recommendations: Apply t...
Judging Management System SQL注入漏洞
Judging Management System is a Judging Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Judging Management System v1.0, which originates from a username parameter containing a SQL injection...
classroom-engagement-system SQL注入漏洞
classroom-engagement-system is a classroom engagement system by the individual developer Alexander Harding. A SQL injection vulnerability exists in classroom-engagement-system, which stems from a problem with some unknown functionality that can lead to sql injection...
PT-2023-9790 · Visteon · Visteon Infotainment System
Name of the Vulnerable Software and Affected Versions: Visteon Infotainment System affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of the Visteon Infotainment system. Authentication is not required to...
CVE-2022-47864
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php...
CVE-2022-47865
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php...
Criminals Blauw SQL注入漏洞
Criminals Blauw is an application by NoxxieNl Individual Developer. Criminals Blauw suffers from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter gambleMoney resulting in sql injection...
Lead Management System SQL注入漏洞
Lead management system is a lead management system by Mayuri K. Personal developer. SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeCategories.php. An attacker could use th...
VulnCheck KEV: CVE-2021-24183
The tutorquizbuildergetquestionform AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students...
dronfelipe SQL注入漏洞
dronfelipe is a website by Kyle Bebak, an individual developer. A SQL injection vulnerability exists in dronfelipe. An attacker could exploit this vulnerability to perform a sql injection attack...
The vulnerability of the software solution for managing financial indicators of the SAP Business Planning and Consolidation system lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL queries.
The vulnerability of the SAP Business Planning and Consolidation software solution for managing organizational financial indicators is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...
Lead Management System SQL注入漏洞
Lead management system is a lead management system developed by Mayuri K. A SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of external input SQL statements in the id parameter of removeOrder.php, and can be exploited by attackers to The...