194 matches found
PT-2022-20125
Name of the Vulnerable Software and Affected Versions Automotive Shop Management System version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the API endpoint "/asms/classes/Master.php?f=save product" using the name variable. Recommendations...
PT-2022-20123
Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue is related to Cross Site Scripting XSS via the "/bcms/classes/Master.php?f=save court rental" API endpoint. This allows for potential malicious script injection. No informati...
CVE-2022-30838: Improper Neutralization of Special Elements used in an SQL Command
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=updateapplicationstatus...
CVE-2022-30456: Improper Neutralization of Input During Web Page Generation
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting XSS via /bcms/classes/Master.php?f=savecourtrental...
CVE-2022-29304: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...
PT-2022-19528
Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns SQL Injection via the "/classes/master.php?f=delete Facility" endpoint. This allows for potential manipulation of database queries. No information is provided abou...
Merchandise Online Store SQL注入漏洞
Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deleteinventory to conduct SQL injection attack...
CVE-2022-30384
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteinventory...
CVE-2022-30386
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletefeatured...
CVE-2022-30387
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=payorder...
PT-2022-20105
Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /ctpms/classes/Master.php API endpoint, specifically when the f parameter is set to delete application...
PT-2022-20080
Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue allows for file deletion via the /sns/classes/Master.php?f=delete img API endpoint. This endpoint is vulnerable to exploitation, potentially leading to unauthorized...
PT-2022-20102
Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The issue allows for file deletion via the "/ctpms/classes/Master.php?f=delete img" API endpoint. This endpoint is vulnerable to file deletion attacks. Recommendations For Covid-19...
PT-2022-20088
Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=pay order endpoint, specifically through the f parameter set to pay order...
PT-2022-20092
Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /vloggers merch/classes/Master.php?f=delete cart endpoint, specifically through the f parameter set to delete cart. Recommendations...
PT-2022-20086
Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=delete order API endpoint. Recommendations For Merchandise Online Store version...
PT-2022-20087
Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /vloggers merch/classes/Master.php API endpoint, specifically when the f parameter is set to delete featured. Recommendations For...
PT-2022-20075
Name of the Vulnerable Software and Affected Versions Air Cargo Management System version 1.0 Description The issue concerns SQL Injection vulnerability via the "/acms/classes/Master.php?f=delete cargo type" API endpoint. This allows for potential unauthorized access and manipulation of data. No...
PT-2022-20077
Name of the Vulnerable Software and Affected Versions Air Cargo Management System version 1.0 Description The issue concerns SQL Injection via the /acms/classes/Master.php?f=delete cargo API endpoint. This allows for potential manipulation of database queries. No information is provided about the...