1204 matches found
Open redirect
In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...
CVE-2022-39814
CVE-2022-39814 affects Nokia 1350 OMS (R14.2). The vulnerability is an open redirect on the login page via the next HTTP GET parameter. Root cause: insufficient validation of the next parameter leading to unauthorized redirection. Impact is described as an open redirect; detailed risk (e.g., cred...
CVE-2022-39814
In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...
ETAP Safety Manager 1.0.0.32 Cross Site Scripting
ETAP Safety Manager 1.0.0.32 Remote Unauthenticated Reflected XSS Vendor: ETAP Lighting International NV Product web page: https://www.etaplighting.com Affected version: 1.0.0.32 Summary: The ETAP Safety Manager ESM is a central managing and control system that helps you to monitor, adjust and...
CVE-2022-2700
A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the component GET Parameter Handler. The manipulation of the argument day leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the component GET Parameter Handler. The manipulation of the argument day leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2022-2700 SourceCodester Gym Management System GET Parameter sql injection
A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the component GET Parameter Handler. The manipulation of the argument day leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2022-2700
CVE-2022-2700 affects SourceCodester Gym Management System, via the GET Parameter Handler’s day parameter. The vulnerability allows remote SQL injection, with the exploit publicly disclosed. Impact is described as high (CVE data via NVD). Connected sources indicate no fix/version details are prov...
PT-2022-18176 · Sourcecodester · Sourcecodester Gym Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Gym Management System affected versions not specified Description: A critical vulnerability has been found in the SourceCodester Gym Management System, affecting the GET Parameter Handler component. The manipulation of the day...
Sql injection
A vulnerability was found in SourceCodester Online Admission System and classified as critical. This issue affects some unknown processing of the component GET Parameter Handler. The manipulation of the argument eid leads to sql injection. The exploit has been disclosed to the public and may be...
CVE-2022-2644 SourceCodester Online Admission System GET Parameter sql injection
A vulnerability was found in SourceCodester Online Admission System and classified as critical. This issue affects some unknown processing of the component GET Parameter Handler. The manipulation of the argument eid leads to sql injection. The exploit has been disclosed to the public and may be...
CVE-2022-2644
CVE-2022-2644 affects the SourceCodester Online Admission System, specifically the GET Parameter Handler’s eid parameter, where manipulation leads to SQL injection. Multiple connected sources confirm a critical impact with public disclosure of exploits (VDB-205565) and no consistent vendor fix in...
PT-2022-17849 · Unknown · Sourcecodester Online Admission System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Admission System affected versions not specified Description: A critical issue affects the component GET Parameter Handler in the SourceCodester Online Admission System. The manipulation of the eid argument leads to SQL...
CVE-2022-34608
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ajaxmsg parameter at /AJAX/ajaxget...
CVE-2022-26648
A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...
Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55737)
Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which stems from a GET parameter in /report/list.php that lacks validation for external The vulnerability is caused...
CVE-2022-31415
Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php...
CVE-2022-31415
Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php...