PT-2022-18237 · Zbzcms · Zbzcms

Name of the Vulnerable Software and Affected Versions: zbzcms version 1.0 Description: The issue is related to incorrect access control at the /admin/run ajax.php endpoint, allowing attackers to add administrator accounts arbitrarily. Recommendations: For zbzcms version 1.0, as a temporary...

School Club Application System跨站脚本漏洞

School Club Application System is a school club application system by Carlo Montero Personal Developer. A security vulnerability exists in School Club Application System version 1.0, which stems from a cross-site scripting vulnerability caused by typing "%22%3E%3Cimg%20src=x%20onerror=alert1%3E",...

CVE-2022-28000

Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /CarRental/booking.php via the id parameter...

CVE-2022-28002

Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home...

CVE-2022-28002

Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home...

CVE-2022-27991

Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /stafflogin.php via the Staff ID and Staff Password parameters...

Simple House Rental System 代码问题漏洞

House Rental System is a house rental management system that allows you to add, modify and delete property information, and to place bookings. A security vulnerability exists in Simple House Rental System v1.0, which stems from the lack of restrictions on the type of files that can be uploaded in...

Musical World 代码问题漏洞

Musical World is a music software. A security vulnerability exists in Musical World v1, which originates from uploadsongs.php. An attacker can execute arbitrary code from a specially crafted PHP file...

Seat Reservation System安全漏洞

Seat Reservation System is a seat reservation system for individual developers. A security vulnerability exists in Movie Seat Reservation v1, which stems from a lack of authentication and file restrictions in /index.php?page=home, leading to file disclosure...

Social Codia SMS 代码问题漏洞

Social Codia SMS is an inventory management system from Social Codia India. v1.0 of Social Codia SMS is vulnerable to arbitrary file uploads, which can be exploited by attackers to execute arbitrary code via crafted PHP files...

CVE-2022-26613

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php...

PHPCMS SQL注入漏洞

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules for news, images, downloads, information, products, etc. A security vulnerability exists in PHPCMS v1.0, which stems from the category parameter in categorymenu.php. No detailed vulnerabilit...

CVE-2022-27123

Employee Performance Evaluation v1.0 was discovered to contain a SQL injection vulnerability via the email parameter...

CVE-2022-28115

Online Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2022-28467

Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter...

CVE-2022-28116

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2022-26628

Matrimony v1.0 was discovered to contain a SQL injection vulnerability via the Password parameter...

CVE-2022-26628

Matrimony v1.0 was discovered to contain a SQL injection vulnerability via the Password parameter...

Payroll Management System SQL注入漏洞

Payroll Management System is a payroll management system by Carlo Montero Personal Developer. A security vulnerability exists in Payroll Management System v1.0, which allows an attacker to perform SQL injection via the username parameter...

VetBosSel Matrimony SQL注入漏洞

VetBosSel Matrimony is an online matrimonial website by VetBosSel India. VetBosSel Matrimony v1.0 suffers from a security vulnerability that can be exploited by an attacker via the Password parameter...