2771 matches found
CVE-2022-31969
ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=user/manageuser&id=...
CVE-2022-31975
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser&id=...
CVE-2022-31970
ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/manageresponse&id=...
CVE-2022-31975
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser&id=...
CVE-2022-31352
Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manageservice.php?id=...
CVE-2022-31345
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manageuser&id=...
CVE-2022-30815
elitecms 1.01 is vulnerable to SQL Injection via admin/editsidebar.php?page=2&sidebar=...
CVE-2022-30809
elitecms 1.01 is vulnerable to SQL Injection via /admin/editpage.php?page=...
CVE-2022-30829
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\usersedit.php...
CVE-2022-30809
elitecms 1.01 is vulnerable to SQL Injection via /admin/editpage.php?page=...
CVE-2022-30825
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\clientedit.php...
CVE-2022-30810
elitecms v1.01 is vulnerable to SQL Injection via admin/editpost.php...
Sql injection
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php...
Sql injection
elitecms 1.01 is vulnerable to SQL Injection via /admin/editpage.php?page=...
Sql injection
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php...
PT-2022-21018
Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /bcms/admin/?page=reports/daily sales report&date= endpoint. The date parameter is vulnerable to SQL injecti...
CVE-2022-1980: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input leads to cross site scripting. The attack may be initiated remotely b...
CVE-2022-31996: Improper Neutralization of Special Elements used in an SQL Command
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/managesale&id=...
ChatBot App with Suggestion SQL注入漏洞
ChatBot App with Suggestion is a ChatBot application with Suggestion by Carlo Montero's personal developer. v1.0 of ChatBot App with Suggestion is vulnerable to SQL injection, which originates from /simplechatbot/ admin/?page=responses/manageresponse&id=The page lacks validation for external inpu...
School Dormitory Management System 跨站脚本漏洞
School Dormitory Management System is a school dormitory management system. v1.0 of School Dormitory Management System has a cross-site scripting vulnerability that originates from admin/inc/navigation.php:125 page that lacks a filter for user The vulnerability is caused by a lack of checksum...