116 matches found
CVE-2022-30375: Incorrect Default Permissions
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...
CVE-2022-30408: Undefined Security Weakness
Covid-19 Travel Pass Management System v1.0 is vulnerable to file deletion via /ctpms/classes/Master.php?f=deleteimg...
CVE-2022-30381: Undefined Security Weakness
Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggersmerch/classes/Master.php?f=deleteimg...
CVE-2022-30386: Improper Neutralization of Special Elements used in an SQL Command
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletefeatured...
CVE-2022-29989: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletebooking...
CVE-2022-29749: Improper Neutralization of Special Elements used in an SQL Command
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...
CVE-2022-29750: Improper Neutralization of Special Elements used in an SQL Command
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...
CVE-2022-29988: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete...
CVE-2022-29985: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletecategory...
CVE-2022-28414: Improper Neutralization of Special Elements used in an SQL Command
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...
CVE-2022-28030: Improper Neutralization of Special Elements used in an SQL Command
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteestate...
CVE-2022-28028: Improper Neutralization of Special Elements used in an SQL Command
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...
CVE-2022-28023: Improper Neutralization of Special Elements used in an SQL Command
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...
CVE-2022-28029: Improper Neutralization of Special Elements used in an SQL Command
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...
CVE-2022-28412: Improper Neutralization of Special Elements used in an SQL Command
Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...
CVE-2022-28417: Improper Neutralization of Special Elements used in an SQL Command
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...