39 matches found
EUVD-2021-15543
Malware in sbrugna...
CVE-2025-28408
An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the selectDeptTree method of the /selectDeptTree/deptId endpoint does not properly validate the deptId parameter...
CVE-2024-5362
A vulnerability classified as critical has been found in SourceCodester Online Hospital Management System 1.0. Affected is an unknown function of the file departmentDoctor.php. The manipulation of the argument deptid leads to sql injection. It is possible to launch the attack remotely. The exploi...
Hospital Management System SQL注入漏洞
A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in SourceCodester Online Hospital Management System version 1.0, which stems from an SQL...
CVE-2021-28890
J2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the 1 compId parameter to fast/sys/user/list, 2 deptId parameter to fast/sys/role/list, or 3 roleId parameter to fast/sys/role/authUser/list, related to the use of $ to join SQL statements...
Sentrifugo HRMS 3.2 - id SQL Injection
Sentrifugo HRMS 3.2 - id SQL Injection Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection Exploit Author: minhnb Website: Date: 2020-03-06 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched...
Sentrifugo HRMS 3.2 SQL Injection
Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection Exploit Author: minhnb Website: Date: 2020-03-06 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched Version: unpatched Category: Web Applicatio...
Sentrifugo SQL Injection Vulnerability
Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A SQL injection vulnerability exists in Sentrifugo version 3.2. A remote attacker can exploit this vulnerability to...
CVE-2018-15873
A SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter...
CVE-2018-15873
A SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter...
CVE-2018-15873
A SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter...
Sentrifugo HRMS 3.2 - deptid SQL Injection
Sentrifugo HRMS 3.2 - deptid SQL Injection Exploit Title: Sentrifugo HRMS 3.2 - 'deptid' SQL Injection Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-08-26 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version...
StrongSoft灾害预警系统 warn/AjaxHandle/AjaxOuterWarnForMerger.ashx DeptID参数SQL注入漏洞
注入链接：/warn/AjaxHandle/AjaxOuterWarnForMerger.ashx 注入参数：DeptID 【获取数据库版本】 /warn/AjaxHandle/AjaxOuterWarnForMerger.ashx?action=GetCheckIdByPid&DeptID=1'+AND+2709=SELECT+@@version+AND+'EcwM'='EcwM 【获取当前数据库】...
农友软件建站系统erji.aspx deptid参数SQL注入漏洞
No description provided by source...
SQL Injection Vulnerability in Online Conference System of Beijing Gobit Technology Co.
Online meeting system Beijing Gobitech Technology Co. A SQL injection vulnerability exists in the Online Conference System of Beijing Gobitech Technology Co. The parameter deptid is injected, which can be used by an attacker to launch an attack and obtain sensitive information from the database...
CVE-2010-1702
SQL injection vulnerability in submitticket.php in WHMCompleteSolution WHMCS 4.2 allows remote attackers to execute arbitrary SQL commands via the deptid parameter...
Sql injection
SQL injection vulnerability in submitticket.php in WHMCompleteSolution WHMCS 4.2 allows remote attackers to execute arbitrary SQL commands via the deptid parameter...
CVE-2010-1702
CVE-2010-1702 : Affected software is WHMCompleteSolution (WHMCS) 4.2. The vulnerability is a SQL injection in submitticket.php via the deptid parameter, allowing remote attackers to execute arbitrary SQL commands. This can impact confidentiality, integrity, and availability as described by the NV...