1572 matches found
CVE-2022-30384
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteinventory...
CVE-2022-30386
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletefeatured...
CVE-2022-30387
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=payorder...
CVE-2022-30370: Improper Neutralization of Special Elements used in an SQL Command
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargotype...
CVE-2022-30391: Improper Neutralization of Special Elements used in an SQL Command
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletecategory...
CVE-2022-30372: Improper Neutralization of Special Elements used in an SQL Command
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargo...
CVE-2022-30392: Improper Neutralization of Special Elements used in an SQL Command
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletesubcategory...
CVE-2022-30381: Undefined Security Weakness
Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggersmerch/classes/Master.php?f=deleteimg...
CVE-2022-30375: Incorrect Default Permissions
Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...
CVE-2022-30408: Undefined Security Weakness
Covid-19 Travel Pass Management System v1.0 is vulnerable to file deletion via /ctpms/classes/Master.php?f=deleteimg...
CVE-2022-30386: Improper Neutralization of Special Elements used in an SQL Command
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletefeatured...
CVE-2022-29749: Improper Neutralization of Special Elements used in an SQL Command
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteinvoice...
CVE-2022-29989: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletebooking...
CVE-2022-29988: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete...
CVE-2022-29985: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletecategory...
CVE-2022-29746: Improper Neutralization of Special Elements used in an SQL Command
Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete...
CVE-2022-29750: Improper Neutralization of Special Elements used in an SQL Command
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...
CVE-2022-25647 Deserialization of Untrusted Data
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks...
CVE-2022-25647
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks...
CVE-2022-28414: Improper Neutralization of Special Elements used in an SQL Command
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...