88 matches found
PT-2022-26830 · Unknown · Rukovoditel
Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A SQL injection issue was found in Rukovoditel via the order by parameter at the "/rukovoditel/index.php?module=logs/view&type=php" endpoint. This allows for potential SQL injection attacks...
PT-2022-26333 · Unknown · Simple Cold Storage Management System
Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL injection via the "/csms/admin/storages/view storage.php?id=" endpoint. This allows for potential exploitation. No information is provided about the...
PT-2022-22625 · Testlink · Testlink
Name of the Vulnerable Software and Affected Versions: TestLink version 1.9.20 Description: A stored cross-site scripting XSS issue was found in TestLink via the /lib/inventory/inventoryView.php API endpoint. Recommendations: For version 1.9.20, update to a newer version that contains a fix for...
PT-2022-23568 · Unknown · Ingredients Stock Management System
Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/items/view item.php" API endpoint. Recommendations: For...
CVE-2022-32339
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/viewdoctor.php?id=...
PT-2022-14135 · Unknown · Zoo Management System
Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: A problematic issue has been found in the Zoo Management System, affecting the /zoo/admin/public html/view accounts?type=zookeeper endpoint of the content module. The manipulation of the admin na...
CVE-2020-2258
Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view that HTTP endpoint...
Couchbase Sync Gateway and Couchbase Server Denial of Service Vulnerabilities
Couchbase Sync Gateway and Couchbase Server are both products of Couchbase Inc. Couchbase Sync Gateway is a secure web gateway for data access and data synchronization over the web.Couchbase Server is a distributed open source Couchbase Server is a distributed open-source NoSQL non-relational...