CVE-2022-29661: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save...

CVE-2021-35487

Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates for the Manage Alerts page via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user,...

CVE-2021-35487

Summary : CVE-2021-35487 affects Nokia Broadcast Message Center up to version 11.1.0. An authenticated user can perform a Boolean Blind SQL Injection on the /owui/block/send-receive-updates endpoint via the extIdentifier HTTP POST parameter, enabling retrieval of the database user, database name,...

SQL injection in helloxz/imgurl

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

GHSA-RRJV-34P5-4C7R SQL injection in helloxz/imgurl

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

CVE-2022-29305

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

Sql injection

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

CVE-2022-29305

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

CVE-2022-29305

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

CVE-2022-29305

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

CVE-2022-29305

CVE-2022-29305 concerns imgurl v2.31, which has a Blind SQL injection vulnerability located at /upload/localhost. Multiple connected sources describe the issue as an SQL injection stemming from unsanitized input in the upload handling (e.g., Veracode notes exploitation via the query parameter in ...

CVE-2022-29305: Improper Neutralization of Special Elements used in an SQL Command

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

PT-2022-19529

Name of the Vulnerable Software and Affected Versions imgurl version 2.31 Description The issue is related to a Blind SQL injection vulnerability. This vulnerability can be exploited via the "/upload/localhost" API endpoint. Recommendations For imgurl version 2.31, consider restricting access to...

CVE-2022-26632

Multi-Vendor Online Groceries Management System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /products/viewproduct.php...

CVE-2022-28105

Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/viewfacility.php...

PT-2022-18812

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue is related to a blind SQL injection vulnerability. This vulnerability can be exploited via the id parameter in the "/scbs/view facility.php" API endpoint. Recommendations F...

PT-2022-17966

Name of the Vulnerable Software and Affected Versions Multi-Vendor Online Groceries Management System version 1.0 Description A blind SQL injection issue was found in the Multi-Vendor Online Groceries Management System. The issue is related to the id parameter in the "/products/view product.php"...

CVE-2022-26632: Improper Neutralization of Special Elements used in an SQL Command

Multi-Vendor Online Groceries Management System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /products/viewproduct.php...

Online Discussion Forum Site 1.0 SQL Injection

Exploit Title: Online Discussion Forum Site 1.0 - 'id' Blind SQL Injection Date: 15/05/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15337/online-discussion-forum-site-phpoop-free-source-code.html Version: 1.0...

GHSA-CW9C-V3V2-99HM Blind SQL Injection with privileged Cloud Foundry UAA endpoints

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release uaa-release 13.x versions prior to v13.13,...