PT-2023-21308 · Unknown · Sourcecodester Budget/Expense Tracker System

Name of the Vulnerable Software and Affected Versions: SourceCodester Budget and Expense Tracker System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/budget/manage budget.php of the component GET Parameter Handler. The...

Sql injection

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the bookingid parameter at /admin/budget.php...

CVE-2022-38509: Improper Neutralization of Special Elements used in an SQL Command

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the bookingid parameter at /admin/budget.php...

CVE-2022-30835: Improper Neutralization of Special Elements used in an SQL Command

Wedding Management System v1.0 is vulnerable to SQL Injection. via /Wedding-Management/admin/budget.php?bookingid=...

PT-2022-20349

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/Wedding-Management/admin/budget.php?booking id=" API endpoint, specifically through the booking id variable...

Sql injection

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 aka 0.9 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail...

CVE-2009-1812

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 aka 0.9 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail...

CVE-2009-1812: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 aka 0.9 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail...