5505 matches found
CVE-2022-46956
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...
CVE-2022-46955
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=savequeue...
CVE-2022-46950
CVE-2022-46950 affects Dynamic Transaction Queuing System v1.0. The issue is a SQL injection in the id parameter of /admin/ajax.php?action=delete_window (PHP/MySQL stack implied by CNNVD/CNNVD-derived entries). CVSS 3.1 base score 7.2 (HIGH) with impact on confidentiality, integrity, and availabi...
CVE-2022-46955
CVE-2022-46955 affects Dynamic Transaction Queuing System v1.0. The vulnerability is a SQL injection in the id parameter of /admin/ajax.php?action=save_queue, reported across multiple feeds. The CVSSv3.1 base metrics indicate an overall score of 9.8 (CRITICAL) with Network attack vector, no authe...
PT-2023-15116 · Unknown · Dynamic Transaction Queuing System
Name of the Vulnerable Software and Affected Versions: Dynamic Transaction Queuing System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/ajax.php?action=save queue" API endpoint...
PT-2023-15112 · Unknown · Dynamic Transaction Queuing System
Name of the Vulnerable Software and Affected Versions: Dynamic Transaction Queuing System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/ajax.php?action=delete uploads" API endpoint...
CVE-2022-46954
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletetransaction...
CVE-2022-46950: Improper Neutralization of Special Elements used in an SQL Command
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletewindow...
CVE-2022-46954: Improper Neutralization of Special Elements used in an SQL Command
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletetransaction...
Dynamic Transaction Queuing System SQL注入漏洞
Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, a personal developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0, which stems from an id parameter in its /admin/manageuser.php component that allows an...
CVE-2022-46951: Improper Neutralization of Special Elements used in an SQL Command
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deleteuploads...
CVE-2022-46952
Dynamic Transaction Queuing System v1.0 is affected by a SQL injection vulnerability in the id parameter of /admin/ajax.php?action=delete_user. The CVE-2022-46952 entry documents an in-app SQLi risk with high impact (C/H I/H A/H) and network-based access with no user interaction required; privile...
CVE-2022-46953
Dynamic Transaction Queuing System v1.0 contains a SQL injection vulnerability in /admin/ajax.php?action=save_window via the id parameter. The CVE entry lists a base score of 7.2 (HIGH) with network attack vector, low complexity, and no user interaction. Public connected sources corroborate the v...
CVE-2022-46953: Improper Neutralization of Special Elements used in an SQL Command
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=savewindow...
CVE-2022-46952: Improper Neutralization of Special Elements used in an SQL Command
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deleteuser...
CVE-2022-46956
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...
CVE-2022-46954
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletetransaction...
CVE-2022-46953
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=savewindow...
Dynamic Transaction Queuing System SQL注入漏洞
Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, a personal developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0, which stems from the id parameter of its /admin/ajax.php?action=savequeue component that...
CVE-2022-46956
This CVE (CVE-2022-46956) affects Dynamic Transaction Queuing System v1.0. The issue is a SQL injection in the id parameter of /admin/manage_user.php, caused by improper handling of user-supplied input in that endpoint. The CVSS 3.1 vector indicates Network attack vector, low complexity, high pri...