239 matches found
Simple Online Bidding System SQL注入漏洞
Simple Online Bidding System is an online bidding system by oretnom23 individual developer. SourceCodester Simple Online Bidding System version 1.0 suffers from a SQL injection vulnerability that originates from /simple-online-bidding-system/admin/index.php contains unknown processing, which lead...
PT-2024-33471 · Sourcecodester · Sourcecodester Simple Online Bidding System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /simple-online-bidding-system/admin/index.php?page=manage product. The...
CVE-2024-2077
A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument categoryid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-2077
A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument categoryid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument categoryid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-2077
The CVE-2024-2077 entry concerns SourceCodester Simple Online Bidding System 1.0. Affected component: index.php, where manipulating the category_id parameter enables SQL injection. Impact stated as high confidentiality, integrity, and availability risk, with remote exploitation possible and explo...
CVE-2024-2077 SourceCodester Simple Online Bidding System index.php sql injection
A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument categoryid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Simple Online Bidding System SQL Injection Vulnerability
Simple Online Bidding System is an online bidding system by oretnom23 individual developer. A SQL injection vulnerability exists in Simple Online Bidding System version 1.0, which stems from a parameter categoryid in the file index.php that can lead to SQL injection...
PT-2024-18702 · Sourcecodester · Sourcecodester Simple Online Bidding System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file index.php. The manipulation of the category id argument leads to SQL injection. It is...
File Upload Vulnerability in Easy Tender's Corporate Bidding and Procurement Platform
Shanghai Huizhao Information Technology Co., Ltd. is a comprehensive service provider of electronic bidding system, specializing in the provision of electronic bidding software development and trading platform operation and other services. A file upload vulnerability exists in the E-Tendering...
SQL Injection Vulnerability in Electronic Tendering System of Gansu Chengxing Information Technology Co.
Gansu Chengxing Information Technology Co., Ltd. developed to meet the needs of various types of public resource transactions, can provide timely, reliable and effective support for the Chengxing public resource trading platform. Gansu Chengxing Information Technology Co., Ltd. electronic bidding...
SQL Injection Vulnerability in Sl***_Pa***.aspx of Bid 1.0 Backend of Qixing Engineering Bidding System
Qixing Bidding System is suitable for enterprises to collect information on government procurement, engineering construction, land grant and other bidding information, and to track the progress of works and payment of successful projects. A sql injection vulnerability exists in the backend...
SQL Injection Vulnerability in Sl***_Qu***.aspx of Bid 1.0 Backend of Qixing Engineering Bidding System
Qixing Bidding System is suitable for enterprises to collect information on government procurement, engineering construction, land grant and other bidding information, and to track the progress of works and payment of successful projects. A sql injection vulnerability exists in the back-end...
SQL injection vulnerability in the sl***.aspx page of the Bid frontend of Qixing bidding system Bid (CNVD-2019-06238)
Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...
SQL Injection Vulnerability in Bidding System Bid Frontend Wo***.aspx Page
Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...
SQL injection vulnerability in the sl***.aspx page of the Bid frontend of Qixing bidding system Bid (CNVD-2019-06239)
Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...
SQL Injection Vulnerability in Bidding System Bid Frontend ge***.aspx Page
Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...
SQL Injection Vulnerability in Bidding System Bid Frontend sl***.aspx Page
Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...
SQL Injection Vulnerability in Bidding Member System of Jiangsu Guotai New Point Software Co.
An electronic bidding system is a means of trading on a public resources trading platform. There is a SQL injection vulnerability in the bidding membership system of Jiangsu Guotai New Point Software Co., Ltd. that can be exploited by attackers to obtain sensitive information from the database...