6115 matches found
InventoryManagementSystem SQL注入漏洞
InventoryManagementSystem is an inventory management system by Sajan Rajbhandari, an individual developer. It provides an easy way to track products, suppliers, customers, and purchasing and sales information. A SQL injection vulnerability exists in InventoryManagementSystem version 1.0, which...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.1 due to a SQL injection in the MId parameter of its /student/dele.php...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.3 due to an SQL injection in the RollNo parameter of its /staff/delstu.php...
PT-2022-13632 · Softing · Softing Secure Integration Server
Name of the Vulnerable Software and Affected Versions: Softing Secure Integration Server version V1.22 Description: A denial-of-service condition can be created in the software by sending a crafted HTTP packet with a large content-length header. This issue affects the Softing Secure Integration...
PT-2022-22583 · Unknown · Clinic'S Patient Management System
Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the...
PT-2022-23271 · Unknown · Clinic'S Patient Management System
Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: The issue is related to SQL Injection via the "/pms/update medicine.php?id=" endpoint. This allows for potential manipulation of database queries using the id variable...
Clinic‘s Patient Management System SQL注入漏洞
Clinic's Patient Management System is a patient management system for a clinic by Carlo Montero. A security vulnerability exists in Clinic's Patient Management System v1.0, which can be exploited to construct special strings for SQL injection...
Softing Secure Integration Server 代码问题漏洞
Softing Secure Integration Server is a secure integration server from Softing Germany. It provides a powerful OPC UA data integration layer and supports interface abstraction, aggregation, data preprocessing and security supervision. Softing Secure Integration Server version 1.22, edgeConnector...
PT-2022-18546 · Sourcecodester · Sourcecodester Company Website Cms
Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS version 1.0 Description: A critical issue has been found, affecting an unknown functionality of the file /dashboard/settings, leading to improper authentication. The attack can be launched remotely...
CVE-2022-36750
Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/updateuser.php?id=...
UCMS 代码问题漏洞
UCMS is a content management system written in PHP. A security vulnerability exists in UCMS version 1.6, which originates from an arbitrary file upload vulnerability in the /ucms-v1.6/ucms/sadmin/file PHP file...
Clinic‘s Patient Management System 安全漏洞
Clinic's Patient Management System is a patient management system for clinics by Carlo Montero. A security vulnerability exists in Clinic's Patient Management System v1.0, which allows attackers to achieve arbitrary code execution via url:ip/pms/users.php...
CVE-2022-37415
The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008...
PT-2022-18088 · Unknown · Sourcecodester Simple Food Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Food Ordering System version 1.0 Description: A problematic issue was found in the system, affecting the /login.php file. The manipulation of the email and password arguments with the input "alert1 leads to cross-site...
PT-2022-22611 · Unknown · Complete Online Job Search System
Name of the Vulnerable Software and Affected Versions: Complete Online Job Search System version 1.0 Description: A cross-site scripting XSS issue was found in the Complete Online Job Search System. The vulnerability can be exploited via the U NAME parameter at the...
Interview Management System SQL注入漏洞
Interview Management System is an interview management system for janobe individual developers. A SQL injection vulnerability exists in version 1.0 of Interview Management System, which stems from some unknown handling code in /viewReport.php where entering a special string for the parameter id c...
Apartment Visitor Management System 跨站脚本漏洞
Apartment Visitor Management System is an apartment visitor management system by Carlo Montero Personal Developer. A security vulnerability exists in Apartment Visitor Management System version 1.0, which stems from an unknown part of the code in its manage-apartment.php component, where entering...
CVE-2022-2631 Improper Access Control in tooljet/tooljet
Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0...