312 matches found
PT-2023-31491 · Tongda Oa · Tongda Oa
Name of the Vulnerable Software and Affected Versions: Tongda OA versions prior to 11.10 Description: A critical vulnerability was found in Tongda OA, affecting the file general/hr/manage/staff reinstatement/delete.php. The manipulation of the REINSTATEMENT ID argument leads to SQL injection. The...
Cross-Site Request Forgery (CSRF)
wallabag/wallabag is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists due to the lack of a CSRF token in the resetAction function of ConfigController.php, which allows an attacker to arbitrarily delete the victim user's annotations, entries and tags by sending GET requests ...
BMC Control-M SQL注入漏洞
BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. A security vulnerability exists in BMC Control-M version v9.0.20.200, which originates from the inclusion of a SQL injection vulnerability via the report-id...
PT-2023-25480 · Ibos Oa · Ibos Oa
Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue has been found, affecting the createDeleteCommand function of the ?r=article/default/delete file in the Delete Packet component. This issue leads to SQL injection and can be exploited...
Guangdong Pythagorean OA Office System 跨站请求伪造漏洞
Guangdong Pythagorean OA Office System Gougu OA is a practical enterprise office system of China Gouguopen open source gouguopen open source . A cross-site request forgery vulnerability exists in Guangdong Pythagorean OA Office System versions prior to 4.50.31. The vulnerability stems from the...
PT-2023-22624 · Unknown · Guangdong Pythagorean Oa Office System
Name of the Vulnerable Software and Affected Versions: Guangdong Pythagorean OA Office System versions up to 4.50.31 Description: A vulnerability has been found in the Guangdong Pythagorean OA Office System, affecting unknown code of the file /note/index/delete. The manipulation of the id argumen...
CVE-2022-46472
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete...
PT-2023-14938 · Unknown · Helmet Store Showroom Site
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/hss/classes/Users.php?f=delete" API endpoint. Recommendations: For...
PT-2022-27213 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the /asms/classes/Master.php?f=delete transaction endpoint. This allows for potential unauthorized access and...
CVE-2022-43052
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete...
PT-2022-26732 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/odlms/classes/Users.php?f=delete" API endpoint...
PT-2022-24055 · Unknown · Sourcecodester Train Scheduler App
Name of the Vulnerable Software and Affected Versions: SourceCodester Train Scheduler App version 1.0 Description: A critical issue affects some unknown functionality of the file "/train scheduler app/?action=delete". The manipulation of the id argument leads to improper control of resource...
PT-2022-25626 · Unknown · Online Leave Management System
Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/leave system/classes/Master.php?f=delete application" API endpoint. This allows for potential unauthorized access and...
CVE-2022-38260
Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=questiondelete&id=...
Interview Management System SQL注入漏洞
Interview Management System is an interview management system for janobe individual developers. A security vulnerability exists in Interview Management System v1.0, which was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=questiondelete&id=...
PT-2022-24320 · Unknown · Interview Management System
Name of the Vulnerable Software and Affected Versions: Interview Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the /interview/delete.php component, specifically through the action and id parameters. Recommendations: For...
PT-2022-23590 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the bookId parameter at the "/librarian/delete.php" API endpoint. Recommendations: For Library...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.0, which was discovered to contain an SQL injection vulnerability via the MI...