CVE-2024-6527: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in parameter "w" in file "druk.php" in MegaBIP software allows unauthorized attacker to disclose the contents of the database and obtain administrator's token to modify the content of pages. This issue affects MegaBIP software versions through 5.13...

PT-2024-37691

Name of the Vulnerable Software and Affected Versions MegaBIP software versions through 5.13 Description The issue allows an unauthorized attacker to disclose the contents of the database and obtain the administrator's token to modify the content of pages due to a SQL Injection vulnerability in t...

CVE-2007-2198: Undefined Security Weakness

Cross-site scripting XSS vulnerability in LAN Management System LMS before 1.6.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving the OD parameter to contrib/formularzprzelewuwplaty/druk.php...