10 matches found
EUVD-2026-52275
SiYuan: Full-content disclosure of publish-disabled documents via getHeadingTransaction endpoints publish mode: reader-reachable rendered DOM with no publish-access check...
CVE-2026-68587
SiYuan has a information-disclosure vulnerability affecting versions before v3.7.3. The flaw lies in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingInsertTransaction endpoints, which return rendered block DOM without publish-access checks. Consequently, anonymous reade...
EUVD-2022-47345
Malicious code in bioql PyPI...
Sql injection
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletetransaction...
Dynamic Transaction Queuing System SQL注入漏洞
Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, a personal developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0, which stems from the id parameter of its /admin/ajax.php?action=deletetransaction componen...
CVE-2022-46954
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletetransaction...
CVE-2022-44402
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deletetransaction...
Automotive Shop Management System SQL注入漏洞
Automotive Shop Management System is an automotive shop management system from Carlo Montero's personal developer. version v1.0 of Automotive Shop Management System is vulnerable to SQL injection, which originates from /asms/classes/Master.php?f=deletetransaction missing validation of external...
