CVE-2022-1684

The Cube Slider WordPress plugin through 1.2 does not sanitise and escape the idslider parameter before using it in various SQL queries, leading to SQL Injections exploitable by high privileged users such as admin...

keep 安全漏洞

keep is a Meta CLI toolkit from the Python Foundation. A security vulnerability exists in keep version 1.2, which stems from the installation of request packages when installing the keep package, and is exploited by an attacker to leave a malicious backdoor on a victimized machine...

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System, a task scheduling system, is vulnerable to a SQL injection vulnerability in Simple Task Scheduling System version 1.0. An attacker can use this vulnerability to issue SQL commands to the MySQL database via the vulnerable "id" parameter...

CVE-2022-32019

Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=savecar...

CVE-2022-32020

Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via ip/car-rental-management-system/admin/ajax.php?action=savesettings...

CVE-2022-32020

Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via ip/car-rental-management-system/admin/ajax.php?action=savesettings...

CVE-2022-32018

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=...

CVE-2022-32011

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...

CVE-2022-31990

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deleteproduct...

CVE-2022-31991

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deletecourt...

CVE-2022-32014

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...

CVE-2022-31993

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deleteservice...

CVE-2022-32016

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...

CVE-2022-32008

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/vacancy/index.php?view=edit&id=...

CVE-2022-32011

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...

CVE-2022-31986

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailycourtrentalreport&date=...

CVE-2022-31996

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/managesale&id=...

CVE-2022-32004

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manageproduct.php?id=...

CVE-2022-32004

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manageproduct.php?id=...

CVE-2022-31996

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/managesale&id=...