392 matches found
CVE-2022-25491
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...
CVE-2022-25490
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php...
CVE-2022-25490
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php...
CVE-2022-25490
HMS v1.0 contains a SQL injection flaw in the department.php editid parameter. The vulnerability is documented with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2.0 base score 7.5 (HIGH), indicating network access, no authentication required, and potential high impact on confidentiality, integri...
CVE-2022-25491
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...
HMS SQL注入漏洞
HMS is a computer or web based hospital management system by Kabir Khyrul personal developer in Bangladesh. It helps to manage the operations of a hospital or any healthcare organization. A SQL injection vulnerability exists in HMS version 1.0 which allows an attacker to perform SQL injection via...
CVE-2022-25490: Improper Neutralization of Special Elements used in an SQL Command
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php...
CVE-2022-25491: Improper Neutralization of Special Elements used in an SQL Command
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php...
HMS SQL注入漏洞
HMS is a computer or web based hospital management system by Kabir Khyrul personal developer in Bangladesh. It helps to manage the operations of a hospital or any healthcare organization. A security vulnerability exists in HMS version 1.0 which allows an attacker to perform SQL injection through...
CVE-2021-37806
An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0. The system is vulnerable to time-based SQL injection on multiple endpoints. Based on the SLEEPN function payload that will sleep for a number of seconds used on the 1 editid , 2...
CVE-2021-37806
An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0. The system is vulnerable to time-based SQL injection on multiple endpoints. Based on the SLEEPN function payload that will sleep for a number of seconds used on the 1 editid , 2...
CVE-2021-37806: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0. The system is vulnerable to time-based SQL injection on multiple endpoints. Based on the SLEEPN function payload that will sleep for a number of seconds used on the 1 editid , 2...
PT-2021-21876 · Unknown · Vehicle Parking Management System
Name of the Vulnerable Software and Affected Versions: Vehicle Parking Management System version 1.0 Description: A time-based SQL injection vulnerability exists in the Vehicle Parking Management System, affecting multiple endpoints. The vulnerability is exploited using the SLEEPN function payloa...
CVE-2021-24401
The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an editid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
CVE-2021-24401: Improper Neutralization of Special Elements used in an SQL Command
The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an editid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
WordPress SQL注入漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WP Domain Redirect WordPress plugin 1.0 and earlier versions, whi...
CVE-2021-24395
The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
CVE-2021-24391
An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...