91 matches found
CVE-2024-9193
The WHMpress - WHMCS WordPress Integration Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.3-revision-0 via the whmpressdomainsearchajaxextendedresults function. This makes it possible for unauthenticated attackers to include and execute...
SourceCodester Online Veterinary Appointment System Injection Vulnerability
SourceCodester Online Veterinary Appointment System is a SourceCodester open source online veterinary appointment system. An injection vulnerability exists in SourceCodester Online Veterinary Appointment System version 1.0, which stems from the parameter id of the file...
CVE-2024-48427
A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manageservice&id...
Packers and Movers Management System security vulnerabilities
Packers and Movers Management System is a Packers and Movers Management System by Carlo Montero Individual Developer. A security vulnerability exists in Packers and Movers Management System v1.0, which originates from a SQL injection that allows remote authenticated users to execute arbitrary SQL...
CVE-2023-2347
A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/services/manageservice.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...
CVE-2023-2347: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/services/manageservice.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...
CVE-2022-32006
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/viewservice.php?id=...
CVE-2022-32005
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manageservice.php?id=...
CVE-2022-31353
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/viewservice.php?id=...
PT-2022-21034
Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue allows for SQL Injection via the id parameter in the API endpoint "/admin/services/manage service.php". This could potentially lead to unauthorized access to sensitive data...
CVE-2022-32005: Improper Neutralization of Special Elements used in an SQL Command
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manageservice.php?id=...
CVE-2022-32006: Improper Neutralization of Special Elements used in an SQL Command
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/viewservice.php?id=...
PT-2022-21035
Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/bcms/admin/services/view service.php?id=" API endpoint. The id variable is vulnerable to injection attacks...
CVE-2022-31352
Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manageservice.php?id=...
PT-2022-20707
Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL injection vulnerability. It is exploited via the /ocwbs/admin/services/manage price.php?id= API endpoint. The estimated number of potentially affected devices...
PT-2022-20708
Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL injection in the /ocwbs/admin/services/manage service.php endpoint, specifically with the id parameter. This allows for potential unauthorized access and...
PT-2022-20709
Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ocwbs/admin/services/view service.php?id=" endpoint, specifically through the id variable. No information is...
CVE-2022-31352: Improper Neutralization of Special Elements used in an SQL Command
Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manageservice.php?id=...
de.adorsys.keycloak:keycloak-config-cli (0.1.0-3-2.5.5), io.apiman:apiman-distro-eap7 (>=1.3.1.final, <=1.3.2.final) +101 more potentially affected by CVE-2020-1714 via org.keycloak:keycloak-common (2.5.5.final)
org.keycloak:keycloak-common MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-common and may be impacted: - de.adorsys.keycloak:keycloak-config-cli 0.1.0-3-2.5.5 - io.apiman:apiman-distro-eap7 =1.3.1.final...
