CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

Sql injection

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

CVE-2022-25394

CVE-2022-25394 affects the Medical Store Management System v1.0. The vulnerability is a SQL injection in the cid parameter of customer-add.php, with CVSS-3.1 base score 9.8 (CRITICAL) and high impact on confidentiality, integrity, and availability. The attack vector is network and requires no pri...

PT-2022-17258

Name of the Vulnerable Software and Affected Versions Medical Store Management System version 1.0 Description A SQL injection issue was found in the Medical Store Management System. The vulnerability can be exploited via the cid parameter in the "customer-add.php" endpoint. Recommendations For...

CVE-2022-25394: Improper Neutralization of Special Elements used in an SQL Command

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

Rocky Linux 8 : kernel (RLSA-2021:4056)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4056 advisory. - An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after- free because the ctx is reached via the ctxli...

AlmaLinux 8 : kernel (ALSA-2021:1093)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:1093 advisory. - In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of...

Rocky Linux 8 : kernel (RLSA-2021:2570)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:2570 advisory. - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects...

AlmaLinux 8 : kernel (ALSA-2021:0558)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:0558 advisory. - A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor...

CVE-2021-46448: Improper Neutralization of Special Elements used in an SQL Command

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page=1&cID...

PT-2022-12715

Name of the Vulnerable Software and Affected Versions H.H.G Multistore versions 5.1.0 and below Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/admin/customers.php" API endpoint, specifically when the page and cID variables are used, such as...

freetype2:cidtype1: Use-of-uninitialized-value in sfnt_init_face

Detailed Report: https://oss-fuzz.com/testcase?key=4693744627089408 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cidtype1 Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sfntinitface ttfaceinit openface Sanitizer:...

Privilege Escalation

linux-azure:hirsute is vulnerable to privilege escalation. aspeedlpcctrlmmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c allows an attacker to access the Aspeed LPC control interface and to overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:1460-1 Rating: important References: 1065729 1085030 1100416 1129735 1152489 1154353 1156395 1157177 1167773 1172073 1173604 1176940 1184673 1185762 1186109 1187167 1188563 1188876 1188983 1188985...

Sql injection

ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter...

CVE-2020-18262: Improper Neutralization of Special Elements used in an SQL Command

ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter...

Ed01-Cms SQL注入漏洞

ED01-CMS is a content management system. ED01-CMS 1.0 is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection in the cposts.php component via the cid parameter...

PT-2021-10163

Name of the Vulnerable Software and Affected Versions: ED01-CMS version 1.0 Description: The issue is related to a SQL injection in the component cposts.php via the cid parameter. This allows for potential exploitation. No information is provided about the estimated number of potentially affected...