CVE-2021-41420

A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel...

MaianAffiliate 代码问题漏洞

MaianAffiliate is a free, simple but powerful php referral system written in PHP. a security vulnerability exists in MaianAffiliate v.1.0, which stems from the existence of a PHP code injection issue. An authenticated attacker can exploit this vulnerability to obtain RCE through the MaianAffiliat...

PT-2022-11398 · Unknown · Maianaffiliate

Name of the Vulnerable Software and Affected Versions: MaianAffiliate version 1.0 Description: A PHP code injection issue allows an authenticated attacker to gain remote code execution RCE through the admin panel. Recommendations: For MaianAffiliate version 1.0, at the moment, there is no...

CVE-2022-32342

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/roomtypes/viewroomtype.php?id=...

CVE-2022-23169

attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel...

Design/Logic Flaw

attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel...

CVE-2022-23169

The CVE-2022-23169 entry maps to Amodat Mobile Application Gateway SQL injection. Affected versions: prior to 7.12.00.09. The vulnerability stems from lack of input validation in the agentid SQL statement, allowing an attacker who is authenticated to the admin panel to craft a SQL payload and exe...

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel SQL Injection Vulnerability

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel is a user registration and login system with an administrative panel from EGavilan Media. EGavilan Media User-Registration -and-Login-System-With-Admin-Panel version 1.0 contains a SQL injection vulnerability, which stems from...

FUDForum 跨站脚本漏洞

FUDForum is a PHP-based forum software. version 3.1.2 of FUDForum contains a cross-site scripting vulnerability. An attacker can exploit this vulnerability to perform cross-site scripting attacks with the help of the pageu title parameter of the page manager in the administration control panel...

CVE-2022-31345

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manageuser&id=...

CVE-2022-30813

elitecms 1.01 is vulnerable to SQL Injection via /admin/addpost.php...

CVE-2021-44096

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profileaction - updateuser. This allows a remote attacker to compromise Application SQL database...

Sql injection

elitecms 1.01 is vulnerable to SQL Injection via /admin/editsidebar.php...

Sql injection

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\packageedit.php...

Sql injection

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...

Cross site scripting

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:126...

Complete Online Job Search System SQL注入漏洞

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/admin/company/index.php?view=edit&id=page missing validation of external input SQL statements. An attacker could use this...

Complete Online Job Search System SQL注入漏洞

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/admin/employee/index.php?view=edit&id=page Lack of validation of externally entered SQL statements. An attacker could use this...

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel SQL注入漏洞

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel is a user registration and login system with an administrative panel from EGavilan Media. EGavilan Media User-Registration -and-Login-System-With-Admin-Panel version 1.0 contains a SQL injection vulnerability, which stems from...

Badminton Center Management System SQL注入漏洞

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records.Badminton Center Management System version v1.0 is vulnerable to SQ...