Directory Management System SQL注入漏洞

Directory Management System is a directory management system by Anuj Kumar, a personal developer. A security vulnerability exists in Directory Management System v1.0, which can be exploited to perform an SQL injection attack via the editid parameter in view-directory.php...

CVE-2022-32368

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getgrade.php?id=...

CVE-2022-32375

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/gettimetable.php?id=...

CVE-2022-32378

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacherprofile.php?myindex=...

CVE-2022-32992

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php...

Bank Management System 跨站脚本漏洞

Bank Management System is a bank management system. A cross-site scripting vulnerability exists in Bank Management System version 1.0, which stems from a failure to properly filter content at the /mnotice.php?id=2 parameter. A remote attacker could use this vulnerability to execute cross-site...

itsourcecode Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getteacher.php?id=The page lacks validation for external input SQL statements, which...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getadminprofile.php?myindex=The page lacks validation for external input SQL...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getteacherprofile.php?myindex=The page lacks validation for external input SQL...

Advanced School Management System SQL注入漏洞

Advanced School Management System is an open source PHP and MySQL based school management system. advanced School Management System is vulnerable to SQL injection in version v1.0, which can be exploited by attackers to launch SQL attacks against targets...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getexamtimetable.php?id=The page lacks validation for external input SQL statements,...

itsourcecode Advanced School Management System SQL注入漏洞

Advanced School Management System, a school management system by Angel Jude Reyes Suarez, is a SQL injection vulnerability in version v1.0 of Advanced School Management System, which originates from /school/model/ getclassroom.php?id=The page lacks validation for external input SQL statements,...

CVE-2022-32355

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/viewproduct&id=...

CVE-2022-32359

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deletecategory...

CVE-2022-32354

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manageuser&id=...

CVE-2022-32363

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/viewcategory.php?id=...

CVE-2022-32362

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/managecategory.php?id=...

CVE-2022-32359

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deletecategory...

PYSEC-2022-211

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

CVE-2022-29615

SAP NetWeaver Developer Studio NWDS - version 7.50, is based on Eclipse, which contains the logging framework log4j in version 1.x. The application's confidentiality and integrity could have a low impact due to the vulnerabilities associated with version 1.x...