809 matches found
CVE-2022-29990
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/viewcategory.php?id=...
CVE-2022-29990
CVE-2022-29990 affects Online Sports Complex Booking System 1.0. The vulnerability is a SQL injection in /scbs/admin/categories/view_category.php?id= that enables arbitrary SQL execution and can compromise data confidentiality, integrity, and availability (CVSS3.1: 9.8, HIGH). Connected documents...
CVE-2022-29992
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/managecategory.php?id=...
CVE-2022-29992
CVE-2022-29992 affects the Online Sports Complex Booking System 1.0. The connected documents describe a SQL injection vulnerability exploitable via the URL path /scbs/admin/categories/manage_category.php?id=, indicating unparameterized queries in that component. They do not provide concrete explo...
CVE-2022-29993
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/viewbooking.php?id=...
CVE-2022-29993
The CVE-2022-29993 entry documents an SQL Injection vulnerability in Online Sports Complex Booking System 1.0. Affected component: the web path /scbs/admin/bookings/view_booking.php?id= is vulnerable due to unsanitized input, enabling an attacker to alter or extract database data. CVSS metrics in...
CVE-2022-29994
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/managefacility&id=...
CVE-2022-29994
CVE-2022-29994 affects Online Sports Complex Booking System 1.0. The connected sources confirm a SQL Injection vulnerability in the admin facilities management page, specifically via /scbs/admin/?page=facilities/manage_facility&id=. The vulnerability is triggered through unvalidated external inpu...
CVE-2022-29995
The CVE-2022-29995 entry applies to Online Sports Complex Booking System 1.0 and is caused by SQL injection in the parameter id of the page /scbs/admin/?page=clients/manage_client&id=. The connected docs corroborate a SQL injection vulnerability that can affect confidentiality, integrity, and ava...
CVE-2022-29995
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manageclient&id=...
Online Sports Complex Booking System SQL注入漏洞
Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in /scbs/admin/ categories/viewcategory.php?id=, an attacker can execute...
Online Sports Complex Booking System SQL注入漏洞
Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=clients/manageclient&id= lacks validation of external input SQL statements, which could be exploited to execute illegal SQL commands to steal sensitive database data...
Online Sports Complex Booking System SQL注入漏洞
Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=facilities/managefacility&id= lacks validation of external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data...
GHSA-J2X6-9323-FP7H Integer bounds error in Vyper
Impact in the following code, the return of .returnsint128 is not validated to fall within the bounds of int128. as of v0.3.0, .returnsint128 is validated in simple expressions, but not complex expressions. vyper interface iface: def returnsint128 - int128: view def returnsBytes33 - Bytes33: view...
CVE-2021-35229
Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when using a complex SQL query...
CVE-2021-35229
Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when using a complex SQL query...
Low: Red Hat Security Advisory: Red Hat Decision Manager 7.12.1 security update
An update is now available for Red Hat Decision Manager. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
PYSEC-2022-198
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of .returnsint128 is not validated to fall within the bounds of int128. This issue can result in a misinterpretation of the integer value and lead to incorrect behavior. As of v0.3.0,...
