CVE-2023-3275: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view-pass-detail.php of the component POST Request Handler. The manipulation of the argument searchdata leads to sql injection. T...

Sql injection

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

CVE-2023-1099 SourceCodester Online Student Management System edit-class-detail.php sql injection

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

CVE-2023-1099: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

PT-2022-25401

Name of the Vulnerable Software and Affected Versions Wedding Planner version 1.0 Description A SQL injection issue was found in Wedding Planner via the id parameter at the "/package detail.php" endpoint. This allows for potential exploitation of the database. Recommendations For Wedding Planner...

CVE-2022-36198: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.php, and...

PT-2022-19760

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/Wedding-Management/package detail.php" API endpoint. Recommendations For...

CVE-2021-42223

Cross Site Scripting XSS.vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php...

Cross site scripting

Cross Site Scripting XSS.vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php...

CVE-2021-42223

Cross Site Scripting XSS.vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php...

CVE-2021-42223

CVE-2021-42223 affects Online DJ Booking Management System 1.0. The vulnerability is a Cross-Site Scripting (XSS) in view-booking-detail.php. Root cause: unsanitized input leading to script execution. CVSS scores reported: CVSS v2.0 base score 4.3 (MEDIUM) and CVSS v3.1 base score 6.1 (MEDIUM). E...

CVE-2021-42223: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS.vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php...

Sql injection

SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the 1 listid parameter in detail.php and the 2 groupprice or groupid parameters in searchresult.php...

CVE-2020-21809

SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the 1 listid parameter in detail.php and the 2 groupprice or groupid parameters in searchresult.php...

CVE-2020-21809

SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the 1 listid parameter in detail.php and the 2 groupprice or groupid parameters in searchresult.php...

CVE-2020-21809

Summary: CVE-2020-21809 is a SQL Injection vulnerability in the NukeViet CMS module Shops affecting versions 4.0.29 and 4.3, exploitable via improper handling of input parameters (listid in detail.php; group_price or groupid in search_result.php). The vulnerability is documented with high/critica...

Sql injection

Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit-teacher-detail.php, or the 'searchdata' POST parameter in search.php...

CVE-2021-28423

Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit-teacher-detail.php, or the 'searchdata' POST parameter in search.php...

Online BookStore SQL Injection Vulnerability

Online BookStore is an online bookstore program. There is a sql injection vulnerability in Online Book Store v1.0. The vulnerability is caused by the id parameter in detail.php not filtering special characters, and an attacker can execute arbitrary SQL statements through this vulnerability...

PT-2021-11899

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue concerns a union-based blind SQL injection vulnerability. Specifically, the id parameter in the "detail.php" file is vulnerable, allowing attackers to retrieve all databases. Recommendation...