139 matches found
Projectworlds Apartment Visitors Management System 注入漏洞
Projectworlds Apartment Visitors Management System is an apartment visitor management system from Projectworlds India. An injection vulnerability exists in Projectworlds Apartment Visitors Management System version 1.0, which stems from an incorrect manipulation of the parameter rid that can lead...
CVE-2025-2657: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in projectworlds Apartment Visitors Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /front.php. The manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The...
CVE-2025-0723: Improper Neutralization of Special Elements used in an SQL Command
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-based SQL Injections via the rid and search parameters in all versions up to, and including, 5.9.4.7 due to insufficient escaping on the user supplied parameter and lack of sufficient...
COMPOP 安全漏洞
COMPOP is an all-in-one point-of-sale POS software from COMPOP, Inc. A security vulnerability exists in COMPOP that can be exploited to execute arbitrary code by manipulating the rid, tid, et, and ts parameters...
CVE-2024-48445: Improper Authentication
An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters...
CVE-2024-48177
MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...
CVE-2024-48177
MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...
CVE-2024-48177
MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...
MRCMS 安全漏洞
MRCMS is a content management system by the individual developer of marker. A security vulnerability exists in MRCMS version 3.1.2, which originates from the RID parameter in /admin/article/delete.do contains a SQL injection vulnerability...
CVE-2024-48177: Improper Neutralization of Special Elements used in an SQL Command
MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...
CVE-2024-48177
The content management system MRCMS version 3.1.2 is vulnerable to a SQL injection vulnerability. The flaw exists in the RID parameter located at the /admin/article/delete.do endpoint. This vulnerability allows an attacker to interfere with backend database queries, potentially leading to unautho...
CVE-2024-25315
Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...
Sql injection
Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...
Hotel Managment System SQL Injection Vulnerability
Hotel Managment System is an open source hotel management system from Code-projects. Hotel Managment System version 1.0 suffers from a SQL injection vulnerability that originates from allowing SQL injection via the rid parameter in Hotel/admin/roombook.php...
CVE-2024-25315
Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...
PT-2024-20884 · Code Projects · Code-Projects Hotel Managment System
Name of the Vulnerable Software and Affected Versions: Code-projects Hotel Managment System version 1.0 Description: The issue allows SQL Injection via the rid parameter in the "Hotel/admin/roombook.php" endpoint. This could potentially be exploited by manipulating the rid parameter to inject...
CVE-2024-25315: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...
OcoMon Security Vulnerability
OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. A security vulnerability exists in OcoMon versions prior to v4.0.1 that stems from an information disclosure vulnerability in t...