CVE-2023-26905

An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id...

CVE-2023-26905: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id...

Sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2023-0904: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2022-42021: Improper Neutralization of Special Elements used in an SQL Command

Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=...

CVE-2022-36198: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.php, and...

PT-2022-8002 · Itech · Tech Dating Script

Name of the Vulnerable Software and Affected Versions: Itech Dating Script version 3.26 Description: A critical issue was found in the file /see more details.php, where the manipulation of the id argument leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2017-20125: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functionality of the file /roomtype-details.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has...

CVE-2017-20124: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unknown function of the file /front/roomtype-details.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

PT-2022-7991

Name of the Vulnerable Software and Affected Versions Online Hotel Booking System Pro Plugin version 1.0 Description A critical vulnerability has been found in the Online Hotel Booking System Pro Plugin. The issue affects an unknown function of the file /front/roomtype-details.php. The manipulati...

PT-2022-7992

Name of the Vulnerable Software and Affected Versions Online Hotel Booking System Pro version 1.2 Description A critical vulnerability was found in the Online Hotel Booking System Pro, affecting an unknown functionality of the file /roomtype-details.php. The manipulation of the tid argument leads...

PT-2022-21663

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/inquiries/view details.php" API endpoint. Recommendations...

Wedding Management System SQL Injection Vulnerability (CNVD-2022-54296)

Wedding Management System is a wedding planning management system by John Paul Lim Gabule. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from Wedding-Management/wedding details.php page. details.php page lacks validation of externally entered SQL statements,...

CVE-2020-24932: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complaint-details.php...

Sourcecodester Complaint Management System SQL注入漏洞

Sourcecodester Complaint Management System is an open source Php project by Razormist individual developers. Used to request complaints through an online service . Sourcecodester Complaint Management System 1.0 version of the SQL injection vulnerability , the vulnerability stems from the product...

CVE-2020-25362

The id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an Error-Based blind SQL injection in the /alphaware/details.php path. This allows an attacker to retrieve all databases...

Sql injection

The id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an Error-Based blind SQL injection in the /alphaware/details.php path. This allows an attacker to retrieve all databases...

CVE-2020-25362: Improper Neutralization of Special Elements used in an SQL Command

The id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an Error-Based blind SQL injection in the /alphaware/details.php path. This allows an attacker to retrieve all databases...

PT-2021-3914

Name of the Vulnerable Software and Affected Versions Online Shopping Alphaware version 1.0 Description The issue is related to the id parameter in the web application, which is vulnerable to an Error-Based blind SQL injection. This vulnerability allows an attacker to execute arbitrary SQL comman...

Online Shopping Alphaware 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Shopping Alphaware 1.0 - Multiple SQL Injection Vulnerabilty Exploit Author: Edo Maland Vendor Homepage: https://www.sourcecodester.com/php/14368/online-shopping-alphaware-phpmysql.html Software Link:...