CVE-2025-4743

A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /dashboard/getData.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The...

CVE-2025-4743: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /dashboard/getData.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The...

PT-2018-18263

Name of the Vulnerable Software and Affected Versions: Schneider Electric U.motion Builder versions prior to 1.3.4 Description: The issue exists in the processing of track getdata.php, where the underlying SQLite database query is subject to SQL injection on the id input parameter. Recommendation...

通达OA2013集团版SQL注入+root

简要描述： dd 详细说明： http://www.tongda2000.com/oa/group/ 试用登录 http://www.day900.com/ 注入点：...

CVE-2008-1870

SQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-1870

CVE-2008-1870 describes a SQL injection in the legacy web interface for PIGMy-SQL (≤ 1.4.1) , specifically in the script getdata.php . The vulnerability allows an attacker to manipulate the id parameter to execute arbitrary SQL commands on the backend database. The NVD entry assigns a CVSS v2 bas...

CVE-2008-1870: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

PIGMy-SQL 1.4.1 - 'getdata.php' Blind SQL Injection

!/usr/bin/perl - PIGMy-SQL ; print "Valid Photo ID: "; chompmy $pid=; ifinjecttest$url, $pid print "\nInjecting Please Wait.. This could take several minutes.\n"; my $result = blindattack$url, $pid; print "Exploited! Admin Details Are: ".$result; exit; sub blindattack my $url = shift; my $pid =...