5127 matches found
CVE-2022-31345
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manageuser&id=...
CVE-2022-30813
elitecms 1.01 is vulnerable to SQL Injection via /admin/addpost.php...
CVE-2021-44096
EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profileaction - updateuser. This allows a remote attacker to compromise Application SQL database...
Sql injection
elitecms 1.01 is vulnerable to SQL Injection via /admin/editsidebar.php...
Cross site scripting
School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:126...
Sql injection
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\packageedit.php...
Sql injection
An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...
Complete Online Job Search System SQL注入漏洞
Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/admin/employee/index.php?view=edit&id=page Lack of validation of externally entered SQL statements. An attacker could use this...
EGavilan Media User-Registration-and-Login-System-With-Admin-Panel SQL注入漏洞
EGavilan Media User-Registration-and-Login-System-With-Admin-Panel is a user registration and login system with an administrative panel from EGavilan Media. EGavilan Media User-Registration -and-Login-System-With-Admin-Panel version 1.0 contains a SQL injection vulnerability, which stems from...
Complete Online Job Search System SQL注入漏洞
Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/admin/company/index.php?view=edit&id=page missing validation of external input SQL statements. An attacker could use this...
Complete Online Job Search System SQL注入漏洞
Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/admin/applicants/index.php?view=view&id= The page lacks validation for external input SQL statements. An attacker could use this...
Badminton Center Management System SQL注入漏洞
Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records.Badminton Center Management System version v1.0 is vulnerable to SQ...
Path Traversal via Files Manager
Description Please enter a description of the vulnerability. Steps to reproduce 1.Login to admin panel and go to Modules - Files http://localhost/microweber/admin/view:modules/loadmodule:files 2.Click any file, the url will have the following format:...
CVE-2021-44096
The CVE-2021-44096 entry concerns EGavilan Media User-Registration-and-Login-System-With-Admin-Panel version 1.0. It is vulnerable to SQL Injection via the profile_action - update_user endpoint, allowing a remote attacker to compromise the application’s SQL database. The connected documents consi...
CVE-2022-30814
elitecms v1.01 is vulnerable to SQL Injection via /admin/addsidebar.php...
CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45396)
CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter of /admin.php/pic/admin/type/hy against...
CSCMS Music Portal System SQL Injection Vulnerability
CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter in /admin.php/vod/admin/topic/del for...
Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting
The plugin does not escape and sanitise the preheadertext setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed Go to Newsletters of Newsletter at wordpress admin panel eg...