CVE-2022-30816

elitecms 1.01 is vulnerable to SQL Injection via /admin/editsidebar.php...

CVE-2022-30795

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php...

Elitecms SQL injection vulnerability

Elitecms is a Web content management by elitecms India. elitecms version 1.01 has a SQL injection vulnerability that originates from the admin/editpost.php page's lack of validation of external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal...

Elitecms SQL injection vulnerability

Elitecms is a web content management by elitecms India. elitecms version 1.01 has a SQL injection vulnerability, which originates from the /admin/editsidebar.php page page parameter lack of validation of external input SQL statements, an attacker can use this vulnerability to execute illegal SQL...

Elitecms SQL injection vulnerability

Elitecms is a web content management from elitecms India. elitecms version 1.01 is vulnerable to SQL injection, which originates from admin/editsidebar.php?page=2 & sidebar The page sidebar parameter lacks validation for external input SQL statements, and an attacker could exploit the vulnerabili...

Online Ordering System SQL Injection Vulnerability

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/user/index.php?view=edit&id=page The lack of validation of externally entered SQL...

PT-2022-20329

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue is related to SQL Injection. It can be exploited via the "admin/edit sidebar.php" endpoint with parameters such as page and sidebar. Recommendations For elitecms version 1.01, as a temporary...

PT-2022-20326

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue allows for SQL Injection via the "admin/edit post.php" endpoint. Recommendations For elitecms version 1.01, update to a version that fixes the SQL Injection issue in the "admin/edit post.php" endpoin...

PT-2022-20325

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue concerns SQL Injection via the "/admin/edit page.php?page=" endpoint. This allows for potential manipulation of database queries. No information is provided about the estimated number of affected...

PT-2022-20330

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue allows for SQL Injection via the "/admin/edit sidebar.php" API endpoint. Recommendations For elitecms version 1.01, update to a version that fixes this issue, if available. As a temporary workaround,...

CVE-2022-1503

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...

GetSimple CMS cross-site scripting vulnerability

GetSimple CMS is a content management system CMS written in PHP. GetSimple CMS suffers from a cross-site scripting vulnerability that originates from a lack of data validation filtering of user-supplied data and output in /admin/edit.php. An attacker could exploit this vulnerability to execute...

CVE-2022-23380

There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit...

CVE-2022-24219

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/editpage.php...

CVE-2022-24220

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/editpost.php...

CVE-2022-24222

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edituser.php...

CVE-2022-24222

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edituser.php...

CVE-2022-24222

The CVE-2022-24222 entry concerns eliteCMS v1.0 with a SQL injection vulnerability in the admin path (/admin/edit_user.php). The issue allows remote attackers to submit a crafted SQL request to manipulate the database, obtain sensitive information, or execute arbitrary code, as described across m...

PT-2022-16541

Name of the Vulnerable Software and Affected Versions eliteCMS version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the "/admin/edit page.php" API endpoint. Recommendations For eliteCMS version 1.0, consider restricting access to t...

Elite Graphix Elite Cms has a SQL injection vulnerability

eliteCMS is a popular content management system. A SQL injection vulnerability exists in eliteCMS /admin/edituser.php, which can be exploited by remote attackers to submit a special SQL request to manipulate the database, obtain sensitive information or execute arbitrary code...