EUVD-2022-49725

Malicious code in bioql PyPI...

Sql injection

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this issue is the function deletebrand of the file /admin/maintenance/brand.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

Sql injection

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletebrand...

CVE-2022-46946

CVE-2022-46946 affects Helmet Store Showroom Site v1.0. A SQL injection vulnerability exists in the id parameter of /classes/Master.php?f=delete_brand, enabling potentially unauthorized data access or modification. CVSS v3.1 metrics indicate a HIGH base score (7.2) with NETWORK attack vector, LOW...