Sanitization Management System SQL注入漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System v1.0, which can be exploited by an attacker to perform SQL injection via /php-sms/admin/quotes/manageremark.php?id=...

CVE-2022-44096

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...

CVE-2022-44296

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manageremark.php?id=...

CVE-2022-44295

CVE-2022-44295 affects Sanitization Management System v1.0. The Connected documents and the Initial description consistently state a SQL Injection vulnerability exploitable via the endpoint /php-sms/admin/orders/assign_team.php?id=. They do not provide explicit root-cause details beyond the SQL i...

CVE-2022-44294

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manageservice&id=...

CVE-2022-44296

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manageremark.php?id=...

CVE-2022-44294

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manageservice&id=...

Sanitization Management System SQL注入漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System v1.0, which can be exploited by an attacker to perform SQL injection via /php-sms/admin/orders/assignteam.php?id=...

CVE-2022-44296

Product: Sanitization Management System v1.0. Vulnerability: SQL Injection via /php-sms/admin/quotes/manage_remark.php?id= in the Quotes management remark endpoint. Root cause/vector: unsanitized input in the id parameter (SQLi). Impact (per CVSS): Confidentiality, Integrity, Availability each Hi...

CVE-2022-44096

CVE-2022-44096 affects Sanitization Management System v1.0. The issue is due to hardcoded credentials in the system, enabling privilege escalation and admin-panel access. Multiple connected sources corroborate the vulnerability, including Red Hat and PT Security, which note credential leakage as ...

Sanitization Management System 信任管理问题漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System v1.0, which stems from its use of hard-coded credentials that allow an attacker to elevate privileges and access the...

CVE-2022-44295

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assignteam.php?id=...

CVE-2022-44295

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assignteam.php?id=...

Sanitization Management System SQL注入漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System v1.0, which originates from an SQL injection via /php-sms/admin/?page=services/manageservice&id=...

PT-2022-27173 · Unknown · Sanitization Management System

Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/php-sms/admin/quotes/manage remark.php?id=" endpoint. The estimated number of potentially affected devices...

PT-2022-27171 · Unknown · Sanitization Management System

Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/php-sms/admin/?page=services/manage service&id=" endpoint. The id variable is vulnerable to this type of attack...

CVE-2022-44294

CVE-2022-44294 affects Sanitization Management System v1.0. The provided documents describe a SQL Injection vulnerability exploitable via the endpoint /php-sms/admin/?page=services/manage_service&id=, stemming from unsanitized input in the id parameter. The CVSS metrics indicate a HIGH severity (...

Sanitization Management System 1.0 SQL Injection Vulnerability

Title: SMS - PHP by: oretnom23 v1.0 SQLi Author: nu11secur1ty Vendor: https://github.com/oretnom23, https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/download-code?nid=15770&title=Sanitization+Management+System+Project+in+PHP+and+MySQL+Free+Source+Code Reference...

CVE-2022-45214

A cross-site scripting XSS vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter at /php-sms/classes/Login.php...

CVE-2022-45214

A cross-site scripting XSS vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter at /php-sms/classes/Login.php...