407 matches found
Visitor Management System SQL注入漏洞
Visitor Management System is a visitor management system. A SQL injection vulnerability exists in Visitor Management System v1.0, which originates from the parameter id of manageuser.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to...
Fortinet FortiGuest Log Information Disclosure Vulnerability
Fortinet FortiGuest is a network visitor management solution from Fortinet that helps organizations manage and control visitor access on their networks. A security vulnerability exists in Fortinet FortiGuest that stems from sensitive information being written to log files. This allows a local...
Apartment Visitor Management System SQL Injection Vulnerability
Apartment Visitor Management System is an Apartment Visitor Management System by Carlo Montero Personal Developer. Apartment Visitor Management System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validity filtering of special characters in /avms/index.php,...
CVE-2022-44139
Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php...
CVE-2022-44139
Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php...
Apartment Visitor Management System SQL注入漏洞
Apartment Visitor Management System is an Apartment Visitor Management System by Carlo Montero Personal Developer. Apartment Visitor Management System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validity filtering of special characters in /avms/index.php,...
PT-2022-27119 · Unknown · Apartment Visitor Management System
Name of the Vulnerable Software and Affected Versions: Apartment Visitor Management System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the /avms/index.php endpoint. There is no information provided about the estimated number of potentially affected...
CVE-2022-44139
The CVE-2022-44139 entry affects Apartment Visitor Management System v1.0, with a SQL Injection vulnerability exploitable via /avms/index.php. The public descriptions consistently cite a lack of input validation (e.g., filtering of special characters) in that endpoint as the root cause, enabling ...
CVE-2022-44139
Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php...
ZKSecurity BIO 4.1.2 SQL Injection / Code Execution Vulnerabilities
ADVISORY INFORMATION Product: ZKSecurity BIO Vendor: ZKTeco https://www.zkteco.com/en/ZKBiosecurity/ZKBioSecurityV50004.1.2 Version Affected: 4.1.2 CVE: CVE-2022-36635 Vulnerability: SQL Injection with a plus: RCE CREDIT This vulnerability was discovered and researched by Caio Burgardt and Silton...
ZKSecurity BIO 3.0.5.0_R Privilege Escalation
ADVISORY INFORMATION Product: ZKSecurity BIO Vendor: ZKTeco Version Affected: 3.0.5.0R CVE: CVE-2022-36634 Vulnerability: User privilege escalation CREDIT This vulnerability was discovered and researched by Caio Burgardt and Silton Santos. INTRODUCTION Based on the hybrid biometric technology and...
CVE-2022-38265
Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apartment.php...
CVE-2022-38265
Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apartment.php...
CVE-2022-38265
Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apartment.php...
CVE-2022-38265
CVE-2022-38265 affects Apartment Visitor Management System v1.0. A SQL injection vulnerability is reachable via the editid parameter in /avms/edit-apartment.php. Documents consistently name this issue and provide no official patch details; PT-2022-24321 offers a temporary workaround (restricting ...
Apartment Visitor Management System SQL注入漏洞
Apartment Visitor Management System is an Apartment Visitor Management System by Carlo Montero Personal Developer. A security vulnerability exists in Apartment Visitor Management System v1.0, which was discovered to contain an SQL injection vulnerability via the editid parameter of...
PT-2022-24321 · Unknown · Apartment Visitor Management System
Name of the Vulnerable Software and Affected Versions: Apartment Visitor Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the editid parameter at the "/avms/edit-apartment.php" API endpoint. There is no...
CVE-2022-2773
A vulnerability was found in SourceCodester Apartment Visitor Management System. It has been classified as problematic. This affects an unknown part of the file profile.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-206169 w...
CVE-2022-2772
A vulnerability was found in SourceCodester Apartment Visitor Management System and classified as critical. Affected by this issue is some unknown functionality of the file action-visitor.php. The manipulation of the argument editid/remark leads to sql injection. The attack may be launched...
Cross site scripting
A vulnerability was found in SourceCodester Apartment Visitor Management System. It has been classified as problematic. This affects an unknown part of the file profile.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-206169 w...