998 matches found
CVE-2022-28434
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2...
CVE-2022-28433
CVE-2022-28433 affects Baby Care System v1.0. Several connected sources confirm a SQL injection vulnerability in the admin panel, originating from the parameter in /admin/uesrs.php (userid) with values like action=display&value=Show. The root cause, as described, is lack of validation/sanitizatio...
CVE-2022-28435
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1...
CVE-2022-28435
CVE-2022-28435 affects Baby Care System v1.0. A SQL injection vulnerability exists in /admin/siteoptions.php with parameters such as action=displaygoal&value=1&roleid=1, originating from improper input handling. The vulnerable component appears to be the admin siteoptions functionality, enabling ...
CVE-2022-28437
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3...
CVE-2022-28437
CVE-2022-28437 affects Baby Care System v1.0. The vulnerability is a SQL injection in the admin interface, originating in /admin/uesrs.php with parameters action=type, userrole=Admin, and userid, where the userid input is not properly validated. This leads to potential unauthorized access to the ...
CVE-2022-28436
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=...
CVE-2022-28436
Summary: CVE-2022-28436 affects Baby Care System v1.0 with a SQL injection in the admin/uesrs.php endpoint via the userid parameter (/* action=display, value=Hide /). The root cause is lack of input validation for the userid parameter, enabling SQL commands to be injected and potentially exfiltra...
CVE-2022-28438
The CVE-2022-28438 entry concerns Baby Care System v1.0, which is vulnerable to SQL injection via /admin/uesrs.php&action=type&userrole=User&userid=. Multiple trusted sources (NVD, CNVD, Red Hat advisory, CVE listing) consistently describe SQLi arising from lack of input validation in the userid ...
CVE-2022-28438
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=...
CVE-2022-28439
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4...
CVE-2022-28439
CVE-2022-28439 affects Baby Care System v1.0. A SQL injection vulnerability exists in the userid parameter of /admin/uesrs.php (query uses userid=4 with action=delete), allowing arbitrary SQL execution. Connected sources (CNVD, NVD, Red Hat, CVE listings, CNVD/CNNVD) consistently describe lack of...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/uesrs.php & action=display & value=Hide & userid= where the userid parameter lacks validati...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/pagerole.php & action=display & value=1 & roleid= where the roleid parameter lacks validati...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/siteoptions.php & action=displaygoal & value=1 & roleid= where the roleid parameter is...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin/uesrs.php & action=type & userrole=User & userid= in the userid parameter missing validation of...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin.php?id=posts...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/siteoptions.php & social=remove & sid= where the sid parameter lacks validation for externa...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/uesrs.php & action=display & value=Show & userid= where the userid parameter lacks validati...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates from the lack of validation of external input SQL statements in the setid parameter in...