Online Payroll System SQL Injection Vulnerability

Online Payroll System is a system for distributing payroll online. Online Payroll System is vulnerable to SQL injection, which can be exploited by attackers to submit special SQL requests to manipulate the database and obtain sensitive information...

Online Payroll System SQL Injection Vulnerability

Online Payroll System is a system for distributing payroll online. Online Payroll System is vulnerable to SQL injection, which can be exploited by attackers to submit special SQL requests to manipulate the database and obtain sensitive information...

I-TECH TrainSmart SQL injection vulnerability

I-TECH TrainSmart is an open source web-based training data collection system from I-TECH. A security vulnerability exists in I-TECH TrainSmart version r1044 that stems from the presence of a SQL injection vulnerability...

SourceCodester Online Payroll System SQL Injection Vulnerability

Online Payroll System is a system for distributing payroll online. Online Payroll System is vulnerable to SQL injection, which can be exploited by attackers to submit special SQL requests to manipulate the database and obtain sensitive information...

PublicCMS SQL Injection Vulnerability

PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A security vulnerability exists in PublicCMS v.4.0. An attacker exploits the vulnerability to execute arbitrary code via the sql parameter of SysSiteAdminControl...

CONPROSYS HMI SQL Injection

The vulnerability of HMI/SCADA CONPROSYS HMI lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending specially crafted SQL queries to the databas...

SourceCodester Centralized Covid Vaccination Records System SQL Injection Vulnerability

Centralized Covid Vaccination Records System is a new Covid Pneumonia Vaccination Records System by Carlo Montero Individual Developer. SourceCodester Centralized Covid Vaccination Records System is vulnerable to SQL injection. No information about this vulnerability is available at this time,...

Red Gate SQL Monitor Cross-Site Script Vulnerability

Red Gate Software Redgate SQL Monitor is a database monitoring tool from Red Gate Software, UK. The product supports Microsoft SQL Server monitoring, alerting, analysis and more. A security vulnerability exists in Red Gate SQL Monitor version 12.1.31.893, which stems from a cross-site scripting X...

BluePage CMS SQL injection vulnerability

BluePage CMS is a content management system from BluePage open source. A security vulnerability exists in BluePage CMS version 3.9 and earlier versions , the vulnerability stems from SQL injection when processing insufficiently cleaned HTTP headers...

Akbim Computer Panon SQL Injection Vulnerability

Akbim Computer Panon is an application from Akbim, Inc. An SQL injection vulnerability exists in Akbim Computer Panon versions prior to 1.0.2, which stems from improper neutralization of a special element used, resulting in SQL injection...

Apache Fineract SQL Injection

The vulnerability of the Apache Fineract digital financial services platform relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to gain read, modify, or delete access to data...

Grade Point Average GPA Calculator SQL Injection Vulnerability

Grade Point Average GPA Calculator is an online and automated platform for calculating a student's grade point average or GPA built using the Bootstrap framework. A security vulnerability exists in SourceCodester Grade Point Average GPA Calculator version 1.0, which stems from a problem with the...

PT-2023-14807 · Xman · Xman

Name of the Vulnerable Software and Affected Versions: X-Man version 1.0 Description: The issue is related to a SQL injection vulnerability, which can cause data leakage. Recommendations: For X-Man version 1.0, consider applying a patch or fix to resolve the SQL injection vulnerability. As a...

Young Entrepreneur E-Negosyo System SQL Injection Vulnerability

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter UUSERNAME resulting in sql...

HashiCorp Vault SQL injection vulnerability

HashiCorp Vault is a private key access management tool from HashiCorp Inc. in the United States. A SQL injection vulnerability exists in HashiCorp Vault versions 0.8.0 through 1.13.1, which stems from the fact that when configuring the MSSQL plugin locally, certain parameters are not cleaned up...

Centreon SQL injection vulnerability

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems, and applications. A SQL injection vulnerability exists in Centreon, which arises from failure to...

Centreon SQL injection vulnerability

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems, and applications. A SQL injection vulnerability exists in Centreon, which arises from failure to...

Ivanti Avalanche SQL Injection Vulnerability

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. Ivanti Avalanche version 6.3.2.3490 suffers from a SQL injection vulnerability that stems from a crafted request in...

Cerebrate SQL injection vulnerabilities

Cerebrate is an open source platform. Designed to act as an interconnect coordinator for trusted contact information providers and other security tools. A security vulnerability exists in Cerebrate version 1.13 that stems from the presence of SQL blind comments in the searchAll API endpoint...

CVE-2023-1592

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file admin/courses/viewclass.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...