30 matches found
EUVD-2022-43762
Malicious code in bioql PyPI...
CVE-2022-40484
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientedit.php...
CVE-2022-40402
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientassign.php...
CVE-2024-48246
Vehicle Management System 1.0 contains a Stored Cross-Site Scripting XSS vulnerability in the "Name" parameter of /vehicle-management/booking.php...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system developed by Mayuri K. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which originates in /admin/up booking.php parameter lacks validation for external input SQL statements. An...
CVE-2022-40484
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientedit.php...
CVE-2022-40484
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientedit.php...
Sql injection
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientedit.php...
CVE-2022-40402
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientassign.php...
CVE-2022-40402
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientassign.php...
CVE-2022-40484
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientedit.php...
CVE-2022-40484
CVE-2022-40484 – Wedding Planner v1.0 : A SQL injection vulnerability exists in the booking parameter of /admin/client_edit.php. The root cause is lack of validation of externally entered SQL statements, enabling an attacker to disclose sensitive database information. Affected software is explici...
CVE-2022-40484
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientedit.php...
CVE-2022-40402
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientassign.php...
CVE-2022-40402
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientassign.php...
CVE-2022-40402
Wedding Planner v1.0 exposes a SQL injection via the booking parameter on /admin/client_assign.php. Root cause: unsafely constructed SQL statements in user input lead to data disclosure (per multiple sources). Affected component: the booking field in /admin/client_assign.php. CVSS v3.1 base score...
Wedding Planner SQL注入漏洞
Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally...
PT-2022-25366 · Unknown · Wedding Planner
Name of the Vulnerable Software and Affected Versions: Wedding Planner version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the booking parameter at the "/admin/client assign.php" API endpoint. Recommendations: For Wedding Planner...
CVE-2022-36544
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php...
Edoc-doctor-appointment-system SQL注入漏洞
Edoc-doctor-appointment-system is a simple web project for e-channels by HashenUdara Personal Developer. A security vulnerability exists in Edoc-doctor-appointment-system version v1.0.1, which stems from the discovery of a SQL injection vulnerability via the id parameter in /patient/booking.php...