Elitecms SQL Injection Vulnerability

Elitecms is a web content management from elitecms India. elitecms version 1.01 is vulnerable to SQL injection, which originates from admin/editsidebar.php?page=2 & sidebar The page sidebar parameter lacks validation for external input SQL statements, and an attacker could exploit the vulnerabili...

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55742)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=teams/view team&id=Lack of validation of external input SQL statements, an...

Wedding Management System SQL Injection Vulnerability (CNVD-2022-54285)

Wedding Management System v1.0 is a wedding planning management system by John Paul Lim Gabule, a personal developer, and a SQL injection vulnerability in /Wedding-Management/admin/. clientmanageaccountdetails.php?bookingid=31&userid page lacks validation for external input SQL statements, which...

Rescue Dispatch Management System SQL注入漏洞（CNVD-2022-53909）

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. rescue dispatch management system v1.0 is vulnerable to SQL injection, which originates from /rdms/admin/ The vulnerability originates from...

Online Car Wash Booking System SQL注入漏洞（CNVD-2022-53352）

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. version v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/classes/Master.php?f =deletevehicle page lacks validation for external input SQL...

Badminton Center Management System SQL注入漏洞（CNVD-2022-44733）

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. Badminton Center Management System v1.0 provides an online and automated platform for badminton centers to manage their daily transactions and records. An SQL injection vulnerabilit...

Rescue Dispatch Management System SQL注入漏洞（CNVD-2022-53914）

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. rescue dispatch management system v1.0 is vulnerable to SQL injection, which originates from /rdms/classes/ Master.php?f=deleterespondenttype page lacks validation of external input S...

Badminton Center Management System SQL注入漏洞（CNVD-2022-44728）

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. version v1.0 of Badminton Center Management System is vulnerable t...

Badminton Center Management System SQL注入漏洞

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records.Badminton Center Management System version v1.0 is vulnerable to SQ...

ChurchCRM SQL Injection Vulnerability

ChurchCRM, a CRM system for churches, has a SQL injection vulnerability in ChurchCRM version 4.4.5, which originates from a security issue in the "PersonID" field of /churchcrm/WhyCameEditor.php. An attacker could use this vulnerability to perform sql injection and steal data...

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55740)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=requests/ viewrequest&id=Lack of validation of external input SQL statement...

Rescue Dispatch Management System SQL注入漏洞

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. rescue dispatch management system v1.0 is vulnerable to SQL injection, which originates from rdms/admin/teams/ viewteam.php?id=The page lacks validation for external input SQL...

phpABook SQL Injection Vulnerability

phpABook is a simple address/contact management system using PHP and MySQL. phpABook version 0.9i is vulnerable to a SQL injection vulnerability caused by a failure to properly clean up the "authuser" parameter in the index.php script. An attacker could use this vulnerability to execute illegal S...

Prison Management System SQL注入漏洞

Prison Management System is a prison management system from Carlo Montero's personal developer. version 1.0 of Prison Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

WordPress plugin Note Press SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. FormCraft is one of the form creation plugins used in it. WordPress plugin is an application plugin. WordPress Note Press plugin 0.1.10 and earlier...

WordPress plugin Note Press SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Note Press plugin 0.1.10 and earlier versions are vulnerable to SQL injection, which stems...

WordPress plugin amtyThumb SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress amtyThumb plugin 4.2.0 and earlier versions are vulnerable to SQL injection, which stems fr...

WordPress plugin Realty Workstation SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plug-in. SQL injection vulnerability exists in versions prior to WordPress Realty Workstation plugin 1.0.15,...

ChurchCRM SQL注入漏洞

ChurchCRM, a CRM system for churches, has a SQL injection vulnerability in ChurchCRM version 4.4.5, which originates from a security issue in the "PersonID" field of /churchcrm/WhyCameEditor.php. An attacker could use this vulnerability to perform sql injection and steal data...

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=requests/ viewrequest&id=Lack of validation of external input SQL statement...