CVE-2024-2554: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file update-employee.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched...

CVE-2023-4845: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file accounteditquery.php. The manipulation of the argument adminid leads to sql injection. The attack can be initiated remotely. The exploit...

MLM Membership Plan Script 2.0.5 - SQL Injection

MLM Membership Plan Script 2.0.5 - SQL Injection Exploit Title: MLM Membership Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-membership-plan-script/ Demo:...

metinfo enterprise website management system SQL injection vulnerability-vulnerability warning-the black bar safety net

Brief description: metinfo enterprise website management systemSQL injectionvulnerability Detailed description: member/getpassword. php with admin/admin/getpassword. php file if$p $array = explode'.', base64decode$p; $sql="SELECT FROM $metadmintable WHERE adminid='".$ array0."'"; $sqlarray =...

Feifei television system(PHP) v1. 9 injection vulnerability and fix-vulnerability warning-the black bar safety net

Method of use: http://www.xxxx.com /? s=vod-read-id-1%20and%2 0 1=2%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat0x40,adminid,0x40,adminname,0x40,adminpwd,0x40,2 8,29%20from%20ppadmin--.html And then broke account password,back to their own guess...

CVE-2008-5568: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the adminid, newpass1, and newpass2 parameters...

My PHP Dating - id SQL Injection

My PHP Dating - id SQL Injection | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Sq1 inj3ct1on script : PHP MY DATING see script...

CVE-2005-1419: Undefined Security Weakness

SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Adminid parameter...

CVE-2005-1223

Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adminid field...

CVE-2005-1223

Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adminid field...

CVE-2005-1223: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adminid field...