CVE-2022-29982

CVE-2022-29982 affects the Simple Client Management System 1.0. The vulnerability is a SQL injection in the maintenance page handler: /cms/admin/maintenance/manage_service.php?id=, arising from unsafely constructed SQL statements in user-supplied input. The provided sources describe a risk of exp...

CVE-2022-29983

The CVE-2022-29983 entry concerns Simple Client Management System 1.0 and an SQL Injection vulnerability in the admin invoice view endpoint (/cms/admin/?page=invoice/view_invoice&id=). The connected documents confirm the issue arises from lack of input validation/parameter sanitization, enabling ...

CVE-2022-29984

CVE-2022-29984 affects Simple Client Management System 1.0. The vulnerability is a SQL Injection via the parameter in /cms/admin/?page=client/view_client&id=, arising from lack of input validation. Impact per sources ranges from partial confidentiality/integrity/availability to high/critical depe...

PT-2022-19946

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue allows for SQL Injection via the "/cms/admin/?page=client/view client&id=" API endpoint, specifically through the id variable. This could potentially lead to unauthorized access...

PT-2022-19941

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /cms/classes/Master.php?f=delete designation API endpoint. This allows for potential manipulation of database queries...

PT-2022-19815

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the id parameter in the /cms/admin?page=client/manage client&id= API endpoint. Recommendations For Simple Client Management...

PT-2022-19942

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /cms/admin/?page=user/manage user&id= endpoint. This allows for potential manipulation of database queries. Recommendation...

PT-2022-19945

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection via the /cms/admin/?page=invoice/view invoice&id= endpoint. This allows for potential manipulation of database queries. Recommendations For Simple Client...

PT-2022-19818

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection via the /cms/classes/Master.php?f=delete service endpoint. This allows for potential manipulation of database queries. No information is provided about th...

PT-2022-19814

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/cms/admin/?page=invoice/manage invoice&id=" endpoint, where the id variable is vulnerable. Recommendations For Simple...

CVE-2022-29751: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteclient...

CVE-2022-29982: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manageservice.php?id=...

CVE-2022-29984: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/viewclient&id=...

CVE-2022-29983: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/viewinvoice&id=...

CVE-2022-29747: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manageinvoice&id= // Leak place --- id...

CVE-2022-29748: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manageclient&id=...

CVE-2022-29749: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...

CVE-2022-29750: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...

CVE-2022-29981: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete...

CVE-2022-29979: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deletedesignation...