Lucene search
K

16 matches found

CVE
CVE
added 2025/06/27 12:0 a.m.14 views

CVE-2025-50370

CVE-2025-50370 affects Phpgurukul Medical Card Generation System 1.0, specifically the Inquiry Management endpoint /mcgs/admin/readenq.php. A CSRF flaw exists where an authenticated admin can delete inquiry records via a simple GET request without CSRF token or origin validation. This is supporte...

6.5CVSS6.6AI score0.00123EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 3:18 a.m.2 views

CVE-2023-2345

A vulnerability was found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteinquiry. The manipulation leads to improper authorization. The attack may be launched remotel...

9.8CVSS7.6AI score0.00265EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:57 p.m.3 views

CVE-2022-32358

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteinquiry...

7.2CVSS8.1AI score0.00274EPSS
Exploits1References1
OSV
OSV
added 2023/07/15 8:15 a.m.1 views

CVE-2023-3678

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=deleteinquiry of the component HTTP POST Request Handler. The manipulation of the argument ...

9.8CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/07/15 12:0 a.m.1 views

PT-2023-25694 · Sourcecodester · Ac Repair/Services System

Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /classes/Master.php?f=delete inquiry of the component HTTP POST Request Handle...

9.8CVSS7AI score0.00047EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/07/15 12:0 a.m.1 views

AC Repair and Services System SQL注入漏洞

AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. AC Repair and Services System version 1.0 suffers from a SQL injection vulnerability that originates in the parameter id of file /classes/Master.php?f=deleteinquiry which can lead ...

9.8CVSS7.2AI score0.00047EPSS
Exploits0References3
OSV
OSV
added 2023/04/27 3:15 p.m.0 views

CVE-2023-2345

A vulnerability was found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteinquiry. The manipulation leads to improper authorization. The attack may be launched remotel...

9.8CVSS5.5AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/04/27 12:0 a.m.1 views

PT-2023-18959 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /classes/Master.php?f=delete inquiry. This issue leads to improper...

9.8CVSS6.5AI score0.00265EPSS
Exploits0References4
OSV
OSV
added 2022/11/07 3:15 p.m.1 views

CVE-2022-43350

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=deleteinquiry...

7.2CVSS5.8AI score0.00274EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/11/07 12:0 a.m.2 views

Sanitization Management System SQL注入漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System v1.0, which stems from the id parameter of its /php-sms/classes/Master.php?f=deleteinquiry component that allows an attacker to...

7.2CVSS7.2AI score0.00274EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/11/07 12:0 a.m.2 views

PT-2022-26861 · Unknown · Sanitization Management System

Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/php-sms/classes/Master.php?f=delete inquiry" endpoint...

7.2CVSS7AI score0.00274EPSS
Exploits1References4
OSV
OSV
added 2022/06/14 9:15 p.m.2 views

CVE-2022-32358

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteinquiry...

7.2CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.1 views

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom website from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/classes/Master.php?f=deleteinquiry page Lack of validation of external input SQL statements allows...

7.2CVSS5.9AI score0.00274EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.0 views

CVE-2022-31978

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry...

9.8CVSS7.5AI score0.48185EPSS
Exploits1References3
OSV
OSV
added 2022/06/02 2:15 p.m.1 views

CVE-2022-31978

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry...

9.8CVSS5.8AI score0.48185EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.1 views

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleteinquiry lacks validation for external input SQL statements,...

9.8CVSS6AI score0.48185EPSS
Exploits1References2
Rows per page
Query Builder