301 matches found
CVE-2022-26283
Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the viewplan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...
CVE-2022-26285
Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...
CVE-2022-26284
Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manageclient endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...
CVE-2022-26284
Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manageclient endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...
Sql injection
Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the viewplan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...
Sql injection
Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manageclient endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...
CVE-2022-26284
CVE-2022-26284 affects Simple Client Management System v1.0. The vulnerability is a SQL injection in the manage_client endpoint, exploitable via the id parameter, which can allow an attacker to dump the application’s database through crafted HTTP requests. Public references describe the issue and...
CVE-2022-26283: Improper Neutralization of Special Elements used in an SQL Command
Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the viewplan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...
Simple Subscription Website SQL注入漏洞
Simple Subscription Website is an open source, web-based simple subscription application from Carlo Montero's personal developer. Used to provide companies with possible members to apply for plans that offer certain services, Simple Subscription Website is vulnerable to SQL injection, which can b...
PT-2022-17765 · Unknown · Simple Subscription Website
Name of the Vulnerable Software and Affected Versions: Simple Subscription Website version 1.0 Description: The issue allows attackers to dump the application's database via crafted HTTP requests. This is made possible by a SQL injection vulnerability via the id parameter in the "view plan"...
PT-2022-17767
Name of the Vulnerable Software and Affected Versions Simple Subscription Website version 1.0 Description The issue allows attackers to dump the application's database via crafted HTTP requests. This is made possible by a SQL injection vulnerability via the id parameter in the "apply endpoint"...
CVE-2022-26285: Improper Neutralization of Special Elements used in an SQL Command
Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...
CVE-2022-26284: Improper Neutralization of Special Elements used in an SQL Command
Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manageclient endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...
PT-2022-17766
Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue is related to a SQL injection vulnerability. It affects the manage client endpoint via the id parameter, allowing attackers to dump the application's database using crafted HTTP...
CVE-2021-41652
Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database...
CVE-2021-41652
Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database...
Code injection
Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database...
CVE-2021-41652
Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database...
CVE-2021-41652: Incorrect Default Permissions
Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database...
BatFlat CMS 安全漏洞
Paweł Klockiewicz Batflat CMS is a Paweł Klockiewicz open source application. It provides a CMS website functionality. A security vulnerability exists in BatFlat CMS, which allows an attacker to exploit the vulnerability to dump an entire database...