CVE-2022-41512

An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-26235 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the "/diagnostic/editclient.php?id=" API endpoint. This allows for potential manipulation of database queries by...

USN-5205-1 tcpreplay vulnerabilities

It was discovered that Tcpreplay incorrectly handled certain specially crafted packet capture input when processed by tcpprep. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 ESM. CVE-2018-13112 It was discovered that Tcpreplay...

CVE-2022-41440

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php...

CVE-2022-41439

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php...

CVE-2022-41439

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php...

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual Developer. Billing System Project v1.0 has a SQL injection vulnerability that stems from the id parameter in /phpinventory/edituser.php found to contain a SQL injection vulnerability...

CVE-2022-36068

Discourse vulnerability CVE-2022-36068 affects versions prior to 2.8.9 (stable) and prior to 2.9.0.beta10 (beta/tests-passed). A moderator could create new themes and edit existing themes via the API when not allowed. Patch is available in 2.8.9 (stable) and 2.9.0.beta10 (beta/tests-passed). Ther...

CLSA-2022-1664475636 Fixed CVE-2022-3256 in vim

CVE-2022-3256: copy the mark before editing another buffer...

Online Banking System SQL Injection Vulnerability (CNVD-2022-68370)

Online Banking System is a simple banking system project. It is used to manage bank customer accounts and process basic customer transactions.Online Banking System SQL injection vulnerability, which stems from a SQL injection issue in the custid parameter in the /net-banking/editcustomeraction.ph...

CVE-2022-40484

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientedit.php...

CVE-2022-40403

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/featureedit.php...

CVE-2022-40403

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/featureedit.php...

Wedding Planner SQL注入漏洞

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally...

PT-2022-25367 · Unknown · Wedding Planner

Name of the Vulnerable Software and Affected Versions: Wedding Planner version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/feature edit.php" API endpoint. Recommendations: For Wedding Planner versi...

Wedding Planner SQL注入漏洞

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally...

CVE-2022-40122

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomeraction.php...

CVE-2022-40114

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomer.php...

CVE-2022-40122

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomeraction.php...

CVE-2022-2937

The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title & Description values that can be added to an Image Hover in versions up to, and including, 9.7.3 due to insufficient input sanitization and output escaping. This makes it possible for...