PT-2023-11802 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailor Management System version 1 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the id parameter. This enables the attacker to potentially access or modify sensitive data. Recommendations: For Tail...

PT-2023-11801 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailor Management System version 1 Description: A SQL injection issue allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the "email.php" page. This enables the attacker to potentially access and...

Tailor Management System SQL注入漏洞

Tailor Management System is a tailor store management system by Warren Daloyan, an individual developer. A security vulnerability exists in Tailor Management System version v.1, which originates from a SQL injection vulnerability that can be exploited by an authenticated, remote attacker to execu...

CVE-2020-36072

CVE-2020-36072 is a SQL injection vulnerability in Tailor Management System v1 . The issue allows a remote attacker to execute arbitrary code through the id parameter. The entry is scored with CVSS v3.1 (8.8 HIGH) , with attack vector network , complexity low , privileges low , user interaction n...

CVE-2020-36073

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail parameter of the document.php page...

CVE-2020-36073

Tailor Management System v1 is affected by a SQL injection in the detail parameter of the document.php page. The vulnerability may allow a remote attacker to execute arbitrary code via SQL injection. Root cause: unsafely constructed input into the detail parameter leading to code execution. No fi...

CVE-2020-36071: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the email.php page...

CVE-2020-36074: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...

CVE-2020-36074

CVE-2020-36074 is a SQL injection vulnerability in Tailor Mangement System v.1, where a remote attacker can cause arbitrary code execution through the title parameter. The issue stems from improper input handling in a query path involving the title field. Multiple connected sources corroborate th...

CVE-2020-36073: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail parameter of the document.php page...

CVE-2020-36072

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter...

CVE-2020-36072

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter...

CVE-2020-36071

SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the email.php page...

PT-2023-11803 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailor Management System version 1 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the detail parameter of the "document.php" page. This enables the attacker to potentially access or modify sensitive...

CVE-2020-36074

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...

CVE-2020-36071

SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the email.php page...

CVE-2020-36071

Tailor Management System v1 contains an SQL injection in the email.php page, exploited via the customer parameter. Root cause: unsanitized input enabling code execution. Impact: remote authenticated attacker could execute arbitrary code with high confidentiality, integrity, and availability impac...

CVE-2020-36072: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter...

CVE-2023-1632

DISPUTED A vulnerability has been found in Ellucian Banner Web Tailor 8.6 and classified as critical. This vulnerability affects unknown code of the file /PRODar/twbkwbis.PFirstMenu of the component Login Page. The manipulation of the argument PIDM/WEBID leads to improper authorization. The attac...

PT-2023-17134 · Ellucian · Ellucian Banner Web Tailor

Name of the Vulnerable Software and Affected Versions: Ellucian Banner Web Tailor version 8.6 Description: A critical vulnerability has been found in the Login Page component of Ellucian Banner Web Tailor. The issue affects unknown code of the file /PROD ar/twbkwbis.P FirstMenu. The manipulation ...