2200 matches found
PT-2022-20108
Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The Covid-19 Travel Pass Management System is affected by a SQL Injection issue. This issue can be exploited via the ctpms/admin/?page=user/manage user&id= endpoint, specifically...
PT-2022-19810
Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /mtms/admin/?page=user/manage user&id= endpoint. This allows for potential exploitation by injecting malicious SQL code. The id...
PT-2022-19942
Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /cms/admin/?page=user/manage user&id= endpoint. This allows for potential manipulation of database queries. Recommendation...
WebTareas 2.4 - Blind SQLi (Authenticated)
Exploit Title: WebTareas 2.4 - Blind SQLi Authenticated Date: 04/20/2022 Exploit Author: Behrad Taher Vendor Homepage: https://sourceforge.net/projects/webtareas/ Version: 2.4p3 CVE : CVE-2021-43481 The script takes 3 arguments: IP, user ID, session ID Example usage: python3 webtareassqli.py...
PT-2022-19065
Name of the Vulnerable Software and Affected Versions ED01-CMS version v20180505 Description The issue is related to an arbitrary file upload vulnerability. This vulnerability can be exploited via the /admin/users.php?source=edit user&id=1 endpoint, allowing unauthorized file uploads...
CVE-2022-28436
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/uesrs.php & action=display & value=Hide & userid= where the userid parameter lacks validati...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/uesrs.php & action=type & userrole=Admin & userid= where the userid parameter lacks...
USN-5380-1 bash vulnerability
It was discovered that Bash did not properly drop privileges when the binary had the setuid bit enabled. An attacker could possibly use this issue to escalate privileges...
CVE-2022-27960
Insecure permissions configured in the userid parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information...
CVE-2022-27958
Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information...
PT-2022-18720
Name of the Vulnerable Software and Affected Versions OFCMS version 1.1.4 Description The issue is related to insecure permissions configured in the user id parameter at SysUserController.java, allowing attackers to access and arbitrarily modify users' personal information. Recommendations For...
WordPress SiteGround Security 1.2.5 Authentication Bypass
Description: Authentication Bypass via 2-Factor Authentication Setup Affected Plugin: SiteGround Security Plugin Slug: sg-security Plugin Developer: SiteGround Affected Versions: = 1.2.5 CVE ID: CVE-2022-0992 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...
CVE-2022-28356
creationtimestamp| type| source ---|---|--- 2022-04-03 00:20:59+00:00| seen| https://t.me/cibsecurity/40066...
BlueCMS SQL Injection Vulnerability (CNVD-2022-25774)
BlueCMS is a PHP and MySQL-based content management system CMS. a SQL injection vulnerability exists in BlueCMS version 1.6. The vulnerability can be exploited by remote attackers to execute SQL commands with the help of the 'userid' parameter...
PT-2022-11988
Name of the Vulnerable Software and Affected Versions KONGA version 0.14.9 Description The issue allows attackers to escalate privileges from higher privilege users to full administration access. This is achieved through a crafted condition, as demonstrated by the "/api/user/ID" endpoint at the...
CVE-2022-24050
creationtimestamp| type| source ---|---|--- 2022-02-18 22:41:23+00:00| seen| Telegram/jflCANnqyUeTF7OsgClTq1cuFurNByqDSdBldEAqX8qUvg...
CVE-2021-43950
creationtimestamp| type| source ---|---|--- 2022-02-15 07:33:47+00:00| seen| https://t.me/cibsecurity/37474...