CVE-2021-35283

SQL Injection vulnerability in productadmin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to search.php...

PT-2022-10457

Name of the Vulnerable Software and Affected Versions atoms183 CMS version 1.0 Description The issue allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to the "search.php" endpoint. This enables attackers to potentially manipulate data or execute unauthorized...

CVE-2022-29650: Improper Neutralization of Special Elements used in an SQL Command

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...

PT-2022-19755

Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Search parameter at the "/online-food-order/food-search.php" API endpoint. Recommendations F...

Exploit for SQL Injection in Phpipam

CVE-2022-23046 The original discovery and manual PoC is from...

Code injection

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...

CVE-2022-23046

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...

CVE-2022-23046: Improper Neutralization of Special Elements used in an SQL Command

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...

CVE-2021-39411: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the 1 searchdata parameter in a doctor/search.php and b admin/patient-search.php, and the 2 fromdate and 3 todate parameters in admin/betweendates-detailsreports.php...

CVE-2020-18263

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

CVE-2020-18263

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

CVE-2020-18263

CVE-2020-18263 affects PHP-CMS v1.0, with a SQL injection in the search.php component via the search parameter. This allows attackers to access sensitive database information. Root cause: input from the search parameter is not properly sanitized/validated. Impact is exposure of data; no exploitat...

PT-2021-10164

Name of the Vulnerable Software and Affected Versions: PHP-CMS version 1.0 Description: The issue allows attackers to access sensitive database information through a SQL injection vulnerability in the search.php component via the search parameter. Recommendations: For PHP-CMS version 1.0, as a...

CVE-2020-18263: Improper Neutralization of Special Elements used in an SQL Command

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

CVE-2021-42224

SQL Injection vulnerability exists in IFSC Code Finder Project 1.0 via the searchifsccode POST parameter in /search.php...

CVE-2021-42224: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in IFSC Code Finder Project 1.0 via the searchifsccode POST parameter in /search.php...

CVE-2020-18913

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcmsweb/Search.php component via the attrarray parameter. This vulnerability allows attackers to access sensitive database information...

Sql injection

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcmsweb/Search.php component via the attrarray parameter. This vulnerability allows attackers to access sensitive database information...

CVE-2020-18917

The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's control...

PT-2021-10255

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 SP2 Description: The issue allows remote attackers to execute arbitrary PHP code via the typename parameter in the plus/search.php component. This is possible because the contents of typename.inc are under an attacker's...