CVE-2026-16143: Improper Neutralization of Input During Web Page Generation

The VikRentItems – Flexible Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer email field of the booking checkout form in versions up to, and including, 1.2.1. This is due to insufficient input sanitization and output escaping in the...

CVE-2022-43328

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php...

CVE-2024-12794

A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to sql injection. It is possible to initiate the attack remotely. The exploit...

Codezips E-Commerce Site 注入漏洞

Codezips E-Commerce Site is an open source e-commerce site by Codezips. An injection vulnerability exists in Codezips E-Commerce Site version 1.0, which originates from the dstatus/quantity/ddate parameter of the /admin/editorder.php file containing a SQL injection vulnerability...

PT-2024-17745 · Unknown · Codezips E-Commerce Site

Name of the Vulnerable Software and Affected Versions: Codezips E-Commerce Site version 1.0 Description: A critical issue was found in Codezips E-Commerce Site, affecting an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to SQL...

PT-2022-25932 · Unknown · Garage Management System

Name of the Vulnerable Software and Affected Versions: Garage Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/garage/editorder.php" API endpoint. Recommendations: For Garage...

Garage Management System SQL注入漏洞

Garage Management System is a garage management system by Mayuri K. Individual developer. A security vulnerability exists in Garage Management System version v1.0, which was discovered to contain an SQL injection vulnerability via the id parameter of /gargare/editorder.php...

CVE-2022-43328

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php...

Sql injection

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. Canteen Management System v1.0 suffers from a SQL injection vulnerability, which stems from an id parameter on /editorder.php found to contain a SQL injection vulnerability...