PT-2022-19764

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/pic/admin/type/save API endpoint. Recommendations For version 4.2, avoid using the id parameter in the...

CVE-2022-29682: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del...

PT-2022-19781

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/user/level del" API endpoint. This allows for potential...

PT-2022-19780

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was discovered in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/singer/admin/lists/zhuan" API endpoint. Recommendations...

CVE-2022-29688: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy...

PT-2022-19779

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/User/level sort API endpoint. This allows for potential exploitation. Recommendations For version 4.2, avoid using th...

CVE-2022-29680: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zudel...

CVE-2022-29685: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/levelsort...

CVE-2022-29661: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save...

CVE-2022-29684: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/jsdel...

PT-2022-19783

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/singer/admin/singer/del API endpoint. This allows for potential exploitation. Recommendations For version 4.2, avoid...

PT-2022-20140

Name of the Vulnerable Software and Affected Versions oretnom23 Automotive Shop Management System version 1.0 Description The issue allows remote attackers to exploit a blind SQL Injection Vulnerability through the product id parameter. This vulnerability enables attackers to dump all database...

CVE-2022-29687: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/leveldel...

CVE-2022-29689: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del...

CVE-2021-35487

Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates for the Manage Alerts page via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user,...

CVE-2021-35487

Summary : CVE-2021-35487 affects Nokia Broadcast Message Center up to version 11.1.0. An authenticated user can perform a Boolean Blind SQL Injection on the /owui/block/send-receive-updates endpoint via the extIdentifier HTTP POST parameter, enabling retrieval of the database user, database name,...

CVE-2022-29305

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

CVE-2022-29305

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

CVE-2022-29305

CVE-2022-29305 concerns imgurl v2.31, which has a Blind SQL injection vulnerability located at /upload/localhost. Multiple connected sources describe the issue as an SQL injection stemming from unsanitized input in the upload handling (e.g., Veracode notes exploitation via the query parameter in ...

CVE-2022-29305

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...