Judging Management System security breach

Judging Management System is a judging management system by Carlo Montero Personal Developer. A security vulnerability exists in Sourcecodester Judging Management System v1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary code and obtain sensiti...

Online Faculty Clearance SQL Injection Vulnerability

Online Faculty Clearance is a software application. A SQL injection vulnerability exists in Online Faculty Clearance version 1.0, which originates from a SQL injection vulnerability in the /product/adminviewinfo.php file...

The vulnerability of the selectDeviceListBy method in the software for controlling power supply sources of Voltronic Power ViewPower allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the selectDeviceListBy method in the software for managing power sources of Voltronic Power ViewPower Pro is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

ForU CMS SQL Injection Vulnerability

ForU CMS is a website builder system of ForU open source. ForU CMS 2020-06-23 and earlier versions exist SQL injection vulnerability , the vulnerability stems from the file admin/cmstemplate.php SQL injection vulnerability...

CVE-2024-0362

A vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/change-password.php. The manipulation of the argument cpass leads to sql injection. The exploit has been disclosed to the...

The vulnerability of the SpringBlade microservice development platform lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the SpringBlade microservice development platform lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

PT-2024-14431 · Unknown · Events Shortcodes For The Events Calendar

Name of the Vulnerable Software and Affected Versions: Events Shortcodes For The Events Calendar versions 2.3.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for potential...

WordPress Plugin Randomize SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Randomize suffers...

iparking SQL Injection Vulnerability

iparking is fhsopensource open source a parking fee management system . iparking 1.5.22.RELEASE version of the SQL injection vulnerability , the vulnerability stems from the function getData SQL injection vulnerability...

WordPress Plugin WP ERP SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP ERP is...

CVE-2024-0280

A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file itemtypesubmit.php. The manipulation of the argument typename leads to sql injection. The attack can be launched remotely...

Hospital Management System SQL注入漏洞

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A SQL injection vulnerability exists in Hospital Management System version 1.0, which stems from a lack of validation of externally...

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which is caused by a lack of validation of the productname parameter of the rawstockuseddamagingsmt.php file against...

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which is caused by a lack of validation of externally entered SQL statements in the password parameter of the loginCheck.php...

Hospital Management System SQL Injection Vulnerability

Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Kashipara Hospital Management System version 1.0, which stems from a vulnerability in the...

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which stems from a lack of validation of the printid parameter of itemBillPdf.php against external SQL input, and can be exploited by ...

CVE-2023-46953

SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code via the d parameter in the Documents module...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system from the individual developer Carlo Montero. A SQL injection vulnerability exists in CodeAstro Online Food Ordering System version 1.0, which originates when /admin/ in the component Admin Panel contains unknown code that causes SQL...

QNAP Systems Video Station SQL Injection Vulnerability

QNAP Systems Video Station is a video management and playback application from QNAP Systems. The SQL injection vulnerability, which previously existed in QNAP Systems Video Station version 5.7.2 2023/11/23 , stems from the presence of a SQL injection vulnerability that could allow a user to injec...

Travel Website SQL Injection Vulnerability

Travel Website is a PHP-based travel website. A SQL injection vulnerability exists in Travel Website v1.0, which occurs when the username parameter of the signupAction.php page is processed without filtering before sending the data to the database for processing...