Sql injection

A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in Home Clean Services Management System 1.0. This issue affects register.php?link=registerand. The manipulation with the input alert1 leads to cross site scripting. The attack may be initiated remotely but demands authenticatio...

CVE-2022-30016

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

CVE-2022-30016

CVE-2022-30016 affects Rescue Dispatch Management System 1.0. The issue is an Incorrect Access Control vulnerability that allows unauthorized access via the URL path: /rdms/admin/?page=system_info on localhost. The connected reports consistently describe an access-control error without detailing ...

CVE-2022-28962

CVE-2022-28962 affects Online Sports Complex Booking System 1.0. The vulnerability is SQL Injection exploitable via /scbs/classes/Users.php?f=delete_client, with documented exploitation potential and high-severity scores (CVSS v3.1: 9.8, CRITICAL; CVSS v2.0: 7.5, HIGH). Connected sources corrobor...

CVE-2022-30374

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions/managetransaction&id=...

Sql injection

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions/managetransaction&id=...

CVE-2022-30370

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargotype...

CVE-2022-30374

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions/managetransaction&id=...

CVE-2022-29738

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id...

CVE-2022-29750

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...

Sql injection

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manageclient&id=...

Sql injection

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/viewbooking.php?id=...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manageclient&id=...

CVE-2022-29988

CVE-2022-29988 affects Online Sports Complex Booking System 1.0. A SQL injection flaw exists in scbs/classes/Master.php?f=delete due to lack of validation on the id parameter in the POST request, enabling potentially unauthorized SQL commands. Reported impact per sources cites high confidentialit...

CVE-2022-29748

Affected software: Simple Client Management System 1.0. The vulnerability is a SQL injection in the CMS path cms/admin?page=client/manage_client&id= (also described as manage_client&id=). Root cause: lack of input validation/external input handling in the affected parameter, enabling arbitrary SQ...

CVE-2022-29979

CVE-2022-29979 affects Simple Client Management System 1.0. The vulnerability is an SQL injection in /cms/classes/Master.php?f=delete_designation caused by unsanitized input in the id parameter, enabling arbitrary SQL execution. Documented impact indicates partial confidentiality, integrity, and ...

CVE-2022-29980

The vulnerability CVE-2022-29980 affects Simple Client Management System 1.0. The issue is a SQL injection in the admin user management page, specifically via /cms/admin/?page=user/manage_user&id=, caused by unvalidated external input. This leads to potential exposure of sensitive database data a...

Exploit for Cross-site Scripting in Home_Owners_Collection_Management_System_Project Home_Owners_Collection_Management_System

CVE-2022-28077 Home Owners Collection Management System 1.0 -...

Cross site scripting

Stored XSS in Add New Employee Form in Sourcecodester Employee Daily Task Management System 1.0 Allows Remote Attacker to Inject/Store Arbitrary Code via the Name Field...