567 matches found
CVE-2021-25213: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...
PT-2021-16461
Name of the Vulnerable Software and Affected Versions: SourceCodester Travel Management System version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL statements via the catid parameter to "subcat.php" API endpoint. This enables attackers to manipulate database queries...
CVE-2020-24862
The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...
PT-2021-3913
Name of the Vulnerable Software and Affected Versions Pharmacy Medical Store and Sale Point version 1.0 Description The issue concerns a Time-Based blind SQL injection vulnerability related to the catID parameter. This vulnerability can be exploited via the "/medical/inventories.php" API endpoint...
CVE-2020-24862: Improper Neutralization of Special Elements used in an SQL Command
The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...
Pharmacy Medical Store And Sale Point 1.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection Exploit Author: Moaaz Taha 0xStorm Vendor Homepage: https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.html...
Pharmacy Medical Store and Sale Point 1.0 - (catid) SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection Exploit Author: Moaaz Taha 0xStorm Vendor Homepage: https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.html...
PT-2018-14852
Name of the Vulnerable Software and Affected Versions XiaoCms version 20141229 Description An issue was discovered in XiaoCms, where the API endpoint "admin/index.php?c=content&a=add&catid=3" is vulnerable to CSRF attacks. This can be exploited by entering news via the datacontent parameter...
OpenEMR SQL Injection Vulnerability (CNVD-2018-17436)
OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. Multiple SQL injection vulnerabilities exist in the...
CVE-2018-15143
Multiple SQL injection vulnerabilities in portal/findapptpopupuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 catid or 2 providerid parameter...
CVE-2018-15143: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in portal/findapptpopupuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 catid or 2 providerid parameter...
PT-2018-12897
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote attacker to execute arbitrary SQL commands. This is achieved via the catid or providerid parameter in the "portal/find appt popup user.php" file. Recommendations For...
iScripts eSwap cross-site scripting vulnerability (CNVD-2018-07983)
IScripts eSwap is an item trading program from IScripts Inc. that supports the use of virtual currency or direct item exchange. The program supports the use of virtual currencies for trading or direct item exchange.User Panel is one of the user panels. A cross-site scripting vulnerability exists ...
CVE-2018-10135
iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel...
CVE-2018-10135
iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel...
CVE-2018-10135
iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel...
PT-2018-9702
Name of the Vulnerable Software and Affected Versions: iScripts eSwap version 2.4 Description: The issue is related to Reflected XSS, which occurs via the catid parameter in the "catwiseproducts.php" file within the User Panel. Recommendations: For iScripts eSwap version 2.4, consider restricting...
CVE-2018-10135: Improper Neutralization of Input During Web Page Generation
iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel...
