CVE-2022-30381: Undefined Security Weakness

Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggersmerch/classes/Master.php?f=deleteimg...

CVE-2022-30386: Improper Neutralization of Special Elements used in an SQL Command

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletefeatured...

CVE-2022-30391: Improper Neutralization of Special Elements used in an SQL Command

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletecategory...

CVE-2022-30392: Improper Neutralization of Special Elements used in an SQL Command

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletesubcategory...

CVE-2022-30375: Incorrect Default Permissions

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...

CVE-2022-30370: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargotype...

CVE-2022-30372: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargo...

PT-2022-20090

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=delete sub category endpoint. Recommendations For Merchandise Online Store...

PT-2022-19941

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /cms/classes/Master.php?f=delete designation API endpoint. This allows for potential manipulation of database queries...

CVE-2022-29988: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete...

PT-2022-19818

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection via the /cms/classes/Master.php?f=delete service endpoint. This allows for potential manipulation of database queries. No information is provided about th...

CVE-2022-29989: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletebooking...

CVE-2022-29985: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletecategory...

CVE-2022-29749: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...

CVE-2022-29750: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...

PT-2022-19947

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the Master.php file, specifically through the delete category function. The estimated number of potentially...

PT-2022-19816

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection via the /cms/classes/Master.php?f=delete invoice endpoint. This allows for potential manipulation of database queries. No information is provided about th...

PT-2022-19005

Name of the Vulnerable Software and Affected Versions Car Driving School Management System version 1.0 Description A SQL injection issue was found in the Car Driving School Management System. The vulnerability can be exploited via the /cdsms/classes/Master.php API endpoint, specifically through t...

PT-2022-18770

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The issue is related to the "/reps/classes/Master.php?f=delete estate" API endpoint. Recommendations For Simple...

CVE-2022-28029: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...