CVE-2022-22880: Improper Neutralization of Special Elements used in an SQL Command

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...

PT-2022-15715

Name of the Vulnerable Software and Affected Versions Jeecg-boot version 3.0 Description A SQL injection issue was found in Jeecg-boot via the code parameter in the "/sys/user/queryUserComponentData" API endpoint. Recommendations For Jeecg-boot version 3.0, as a temporary workaround, consider...

CVE-2021-46061

An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system RSMS 1.0 via the code parameter in /rsms/ node app...

CVE-2021-46061

An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system RSMS 1.0 via the code parameter in /rsms/ node app...

CVE-2021-46061: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system RSMS 1.0 via the code parameter in /rsms/ node app...

PT-2022-12540

Name of the Vulnerable Software and Affected Versions Sourcecodester Computer and Mobile Repair Shop Management system RSMS version 1.0 Description An SQL Injection issue exists in the system via the code parameter in the "/rsms/ node app" API endpoint. This allows for potential exploitation. No...

Computer And Mobile Repair Shop Management 1.0 SQL Injection

Title: Computer and Mobile Repair Shop Management-1.0 SQL - Injections Author: nu11secur1ty Date: 12.28.2021 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15108/computer-and-mobile-repair-shop-management-system-using-phpoop-free-source-code.html...

CVE-2020-19118

Cross Site Scripting XSS vulnerabiity in YzmCMS 5.2 via the sitecode parameter in admin/index/init.html...

PT-2021-17318

Name of the Vulnerable Software and Affected Versions: WoWonder version 3.0.4 Description: The issue allows remote attackers to take over any account due to a weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day. Recommendations: For WoWonder...

CVE-2020-27237

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the The nomenclature parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

CVE-2020-27238

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2020-27238

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2020-27238: Improper Neutralization of Special Elements used in an SQL Command

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

PT-2021-11334

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.173.3 Description: An exploitable SQL injection issue exists in the getAssets.jsp page. The code parameter in this page is vulnerable to unauthenticated SQL injection. An attacker can trigger this issue by making an...

CVE-2021-27695

Multiple stored cross-site scripting XSS vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters...

CVE-2020-29143

A SQL injection vulnerability in interface/reports/nonreported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the formcode parameter...

OpenEMR SQL Injection Vulnerability

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in interface/reports/immunizationreport.php in OpenEMR versions prior to 5.0.2.5. A remote authenticated attacker can exploit this vulnerability to execute...

nopCommerce cross-site scripting vulnerabilities

nopCommerce is an open source e-commerce shopping cart software. A reflective cross-site scripting vulnerability exists in the Discount Coupon component in nopCommerce 4.30. An attacker can exploit this vulnerability to inject arbitrary web script or HTML via the...

CVE-2020-27974

NeoPost Mail Accounting Software Pro 5.0.6 allows php/Commun/FUSSCMBlockStart.php?code= XSS...

PT-2020-16881

Name of the Vulnerable Software and Affected Versions NeoPost Mail Accounting Software Pro version 5.0.6 Description The issue allows for XSS in the php/Commun/FUS SCM BlockStart.php endpoint, specifically through the code parameter. Recommendations For NeoPost Mail Accounting Software Pro versio...