PT-2022-19763

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin.php/pic/admin/pic/del" API endpoint. Recommendations For CSCMS Mus...

CVE-2022-29670: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del...

PT-2022-19766

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/pic/admin/type/hy" endpoint. This allows for potential SQL injectio...

CVE-2022-29676: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan...

PT-2022-11214

Name of the Vulnerable Software and Affected Versions Piwigo version 11.5.0 Description The issue is a SQL injection vulnerability. It can be exploited via the "admin.php" endpoint and the id parameter. Recommendations For Piwigo version 11.5.0, update to a version that contains a fix for this...

PT-2022-19776

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/vod/admin/topic/del API endpoint. This allows for potential exploitation. Recommendations For version 4.2, avoid usin...

PT-2022-19777

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/Label/page del API endpoint. Recommendations For version 4.2, avoid using the id parameter in the /admin.php/Label/pa...

Sql injection

SQL Injection vulnerability in admin/batchmanager.php in piwigo v2.9.5, via the filtercategory parameter to admin.php?page=batchmanager...

CVE-2020-19217

SQL Injection vulnerability in admin/batchmanager.php in piwigo v2.9.5, via the filtercategory parameter to admin.php?page=batchmanager...

CVE-2020-19216

This CVE (CVE-2020-19216) affects Piwigo 2.9.5, where an SQL injection exists in admin/user_perm.php triggered via the cat_false parameter in admin.php?page=group_perm. The root cause is an injection vulnerability in the admin permission management flow, allowing potentially unauthorized access t...

CVE-2020-19215

SQL Injection vulnerability in admin/userperm.php in piwigo v2.9.5, via the catfalse parameter to admin.php?page=userperm...

PT-2022-8597

Name of the Vulnerable Software and Affected Versions piwigo version 2.9.5 Description The issue is related to a SQL Injection vulnerability in the admin/user perm.php file. This vulnerability can be exploited via the cat false parameter to the "admin.php?page=group perm" endpoint. Recommendation...

CVE-2020-19215: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in admin/userperm.php in piwigo v2.9.5, via the catfalse parameter to admin.php?page=userperm...

PT-2022-8596

Name of the Vulnerable Software and Affected Versions piwigo version 2.9.5 Description The issue is related to a SQL Injection vulnerability in the admin/user perm.php file. It can be exploited via the cat false parameter to the "admin.php?page=user perm" endpoint. Recommendations For piwigo...

CVE-2020-19217: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in admin/batchmanager.php in piwigo v2.9.5, via the filtercategory parameter to admin.php?page=batchmanager...

CVE-2020-19216: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in admin/userperm.php in piwigo v2.9.5, via the catfalse parameter to admin.php?page=groupperm...

CVE-2022-27413

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php...

Sql injection

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php...

CVE-2022-27413

CVE-2022-27413 affects Hospital Management System v1.0, with a SQL injection vulnerability in admin.php via the adminname parameter. Multiple sources (NVD, CNVD, Red Hat advisory entries and others) corroborate the flaw exists in the same component. CVSS metrics from NVD indicate high to critical...

CVE-2022-27413: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php...