CVE-2022-38833

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view&id=...

CVE-2022-38833

CVE-2022-38833 affects School Activity Updates with SMS Notification v1.0. The vulnerability is a SQL Injection in the PHP endpoint /activity/admin/modules/modstudent/index.php?view=view&id=, arising from unsafe handling of the id parameter in SQL queries within the modstudent module. The CVSS in...

CVE-2022-38833

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view&id=...

PT-2022-24591 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the "/activity/admin/modules/department/index.php?view=edit&id=" endpoint. The id variable is vulnerable to...

School Activity Updates with SMS Notification SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is a school activity. A SQL injection vulnerability exists in School Activity...

School Activity Updates with SMS Notification SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is a school activity. A SQL injection vulnerability exists in School Activity...

School Activity Updates with SMS Notification SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is a school activity. A SQL injection vulnerability exists in School Activity...

PT-2022-24604 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the "/activity/admin/modules/event/index.php?view=edit&id=" API endpoint. The id variable is vulnerable to thi...

CVE-2022-40645

creationtimestamp| type| source ---|---|--- 2022-09-15 20:27:47+00:00| seen| https://t.me/cibsecurity/49840...

Iranian Islamic Revolutionary Guard Corps Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations

CISA, Federal Bureau of Investigation FBI, National Security Agency NSA, U.S. Cyber Command USCC - Cyber National Mission Force CNMF, Department of the Treasury, Australian Cyber Security Centre ACSC, Canadian Centre for Cyber Security CCCS, and United Kingdom’s National Cyber Security Centre NCS...

CVE-2022-20396

In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or user interaction, due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2022-26605 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: This issue allows a user in a privileged network position to potentially track user activity. The issue was addressed with improved data protection. Recommendations: For versions prior to 13, update to...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 12.7.59, which stems from ContactsDumpActivity of Contacts Provider contains an improper access...

CVE-2022-38267

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=...

CVE-2022-38267

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=...

CVE-2022-38269

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=...

CVE-2022-38268

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonumber/index.php?view=edit&id=...

CVE-2022-38268

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonumber/index.php?view=edit&id=...

CVE-2022-38267

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=...

CVE-2022-38269

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=...