900 matches found
CVE-2023-6898
A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The...
RockOA Security Breach
RockOA Xinhuo is an open source office OA system. RockOA 2.3.3 before the version of a security vulnerability , the vulnerability stems from the vulnerability to SQL injection attacks...
Piccolo Security Breach
Piccolo is Piccolo open source a fast , user-friendly ORM and query builder . Piccolo 1.1.1 before the version has a security vulnerability , the vulnerability stems from the vulnerability to SQL injection attacks , attackers can use the vulnerability to directly access the database...
CVE-2023-25045
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David F. Carr RSVPMaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3...
CVE-2023-26584
Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...
PT-2023-6632
Name of the Vulnerable Software and Affected Versions F5 BIG-IP Configuration utility affected versions not specified Description An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility, which may allow an authenticated attacker with network access to the...
IDAttend IDWeb SQL Injection Vulnerability
IDAttend IDWeb is a web-based module from IDAttend, Inc. A security vulnerability exists in IDAttend IDWeb version 3.1.052 and prior versions that stems from an unauthenticated SQL injection in the GetExcursionList method...
Online Computer and Laptop Store SQL Injection Vulnerability
Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Computer and Laptop Store version 1.0, which originates from a SQL injection vulnerability in the file products.php...
Hospital Management System SQL Injection Vulnerability
Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. Hospital Management System has a SQL injection vulnerability that stems from the discovery of a contained SQL injection vulnerability...
CVE-2023-30415
Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/viewinquiry.php...
ZOHO ManageEngine Asset Management System SQL Injection Vulnerability
ZOHO ManageEngine Asset Management System is an asset management solution from ZOHO. A SQL injection vulnerability exists in ZOHO ManageEngine Asset Management System v1.0, which stems from vulnerability to an authenticated SQL injection vulnerability that could allow an authenticated attacker to...
PT-2023-27044 · Unknown · Uplight Cookiebanner
Name of the Vulnerable Software and Affected Versions: UpLight cookiebanner versions prior to 1.5.1 Description: The issue is related to a SQL injection vulnerability via the component Hook::getHookModuleExecList. This vulnerability was discovered in UpLight cookiebanner. Recommendations: For...
CVE-2023-42660
In Progress MOVEit Transfer versions released before 2021.1.8 13.1.8, 2022.0.8 14.0.8, 2022.1.9 14.1.9, 2023.0.6 15.0.6, a SQL injection vulnerability has been identified in the MOVEit Transfer machine interface that could allow an authenticated attacker to gain unauthorized access to the MOVEit...
HotelDruid SQL Injection Vulnerability
Hoteldruid is a free and open source hotel management program from Hoteldruid. A security vulnerability exists in HotelDruid version v3.0.5, which stems from a SQL injection vulnerability in the parameter nutenteagg...
TONGDA Office Anywhere SQL Injection Vulnerability
TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 11.10 and earlier versions, which stems from a SQL injection vulnerability in the parameter PLANID...
OpenRapid RapidCMS SQL Injection Vulnerability
OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. OpenRapid RapidCMS version 1.3.1 SQL injection vulnerability , the vulnerability stems from the file /admin/article/article-add.php SQL injection vulnerability...
CVE-2023-4832
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection. This issue affects Company Management: before 3072...
Exploit for SQL Injection in Simple_Online_Piggery_Management_System_Project Simple_Online_Piggery_Management_System
Online Piggery Farm Management Syst...