PT-2022-21244

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/?page=user/manage user&id= endpoint. The id variable is vulnerable to SQL injection...

CVE-2022-1997

creationtimestamp| type| source ---|---|--- 2022-06-08 18:32:39+00:00| seen| https://t.me/cibsecurity/44035...

CVE-2022-30833

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientedit.php?booking=31&userid=...

CVE-2022-30833

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientedit.php?booking=31&userid=...

CVE-2022-30834

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientmanageaccountdetails.php?bookingid=31&userid=...

CVE-2022-30834

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientmanageaccountdetails.php?bookingid=31&userid=...

CVE-2022-30832

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientassign.php?booking=31&userid=...

PT-2022-20701

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns SQL Injection via the /ocwbs/admin/?page=user/manage user&id= endpoint. This allows for potential manipulation of database queries. No information is provided about the...

PT-2022-21010

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the "/ofrs/admin/?page=user/manage user&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized data...

PT-2022-20348

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /Wedding-Management/admin/client manage account details.php endpoint, specifically through the booking id and user ...

PT-2022-20347

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /Wedding-Management/admin/client edit.php API endpoint, specifically through the user id variable. Recommendations...

PT-2022-20346

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /Wedding-Management/admin/client assign.php endpoint, specifically through the booking and user id parameters...

GHSA-7HWR-F745-5RWQ MediaWiki information disclosure

In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...

MediaWiki information disclosure

In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...

GHSA-RPC6-H455-3RX5 Celery local privilege escalation vulnerability

Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryddetach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving...

CVE-2022-30407

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

CVE-2022-30400

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/orders/vieworder.php?view=user&id=...

Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability

Jerome Gamez Firebase Admin SDK for PHP version from 3.2.0 to 3.8.0 contains a Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could be forged from an actual token, or fro...

PT-2022-20096

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/admin/orders/view order.php?view=user&id= endpoint, specifically through the id variable. No...

PT-2022-20083

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /sns/admin/?page=user/manage user&id= endpoint. The id parameter is vulnerable to injection attacks. Thi...