CVE-2022-29006

Summary (CVE-2022-29006) : Directory Management System 1.0 contains multiple SQL injection vulnerabilities in the Admin panel via the username and password parameters, enabling an attacker to bypass authentication. The Nuclei template and related entries describe exploitation that could lead to s...

Dairy Farm Shop Management System SQL注入漏洞

Dairy Farm Shop Management System is a dairy farm store management system.A SQL injection vulnerability exists in Dairy Farm Shop Management System version 1.0, which stems from multiple SQL injection vulnerabilities in the username and password parameters in the administration panel. An attacker...

PT-2022-19360 · Unknown · Directory Management System

Name of the Vulnerable Software and Affected Versions: Directory Management System version 1.0 Description: The issue allows attackers to bypass authentication due to multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. Recommendations: For Directory...

PT-2022-19361 · Unknown · Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: Dairy Farm Shop Management System version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication. Recommendations: Fo...

PT-2022-19363 · Unknown · Cyber Cafe Management System Project

Name of the Vulnerable Software and Affected Versions: Cyber Cafe Management System Project version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication. Recommendations:...

CVE-2022-28568

Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored...

Sourcecodesterk Doctor Appointment System 代码问题漏洞

Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. It provides an appointment function. A security vulnerability exists in Sourcecodesterk Doctor Appointment System version 1.0, which stems from a remote command execution vulnerability in a file that is upload...

CVE-2022-23904

Rainworx Auctionworx 3.1R2 is vulnerable to a Cross-Site Request Forgery CSRF attack that allows an authenticated user to upgrade his account to admin and gain access to the auctionworx admin control panel. This vulnerability affects AuctionWorx Enterprise and AuctionWorx: Events Edition...

CVE-2022-23904

Rainworx Auctionworx 3.1R2 is vulnerable to a Cross-Site Request Forgery CSRF attack that allows an authenticated user to upgrade his account to admin and gain access to the auctionworx admin control panel. This vulnerability affects AuctionWorx Enterprise and AuctionWorx: Events Edition...

Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin

A cross-site scripting XSS vulnerability exists in the contact us plugin for Subrion CMS = 4.2.1 version via List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel...

CVE-2022-28102

A cross-site scripting XSS vulnerability in PHP MySQL Admin Panel Generator v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected at /edit-db.php...

Cross site scripting

A cross-site scripting XSS vulnerability in PHP MySQL Admin Panel Generator v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected at /edit-db.php...

CVE-2022-28102

A cross-site scripting (XSS) vulnerability affects PHP MySQL Admin Panel Generator v1, exploitable via a crafted payload injected at /edit-db.php. Impact is arbitrary web script/HTML execution. Remediation mentions disabling the /edit-db.php endpoint until a patch is available; monitor for updates.

CVE-2022-28102

A cross-site scripting XSS vulnerability in PHP MySQL Admin Panel Generator v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected at /edit-db.php...

PHP MySQL Admin Panel Generator 跨站脚本漏洞

PHP MySQL Admin Panel Generator is a PHP tool that helps you create PHP admin panels for any MySQL database in seconds. A security vulnerability in PHP MySQL Admin Panel Generator v1 allows attackers to execute arbitrary web script or HTML via a specially crafted payload injected in /edit-db.php...

Sourcecodester Baby Care System SQL注入漏洞（CNVD-2022-35536）

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from the lack of validation of external input SQL in the /admin.php?id=posts & action=display & value=1 &...

CVE-2022-28431

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2...

CVE-2022-28015

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvanceedit.php...

CVE-2022-28010

The CVE-2022-28010 entry affects Attendance and Payroll System v1.0, where a SQL injection vulnerability exists in the component admin/overtime_delete.php. The root cause is lack of input validation allowing external SQL statements to be executed, potentially exposing sensitive database data. Doc...

CVE-2022-28434

CVE-2022-28434 affects Baby Care System v1.0. A SQL injection vulnerability exists in admin.php, exploitable via parameters id=siteoptions, social=edit, sid (example sid=2). Multiple sources corroborate a database-input validation flaw leading to potential unauthorized SQL execution and data expo...