CVE-2023-24780

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns...

Sql injection

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns...

CVE-2023-24777

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list...

CVE-2023-24773

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list...

CVE-2023-24777

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list...

CVE-2023-24782

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit...

CVE-2023-24777

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list...

FunAdmin SQL注入漏洞

FunAdmin is FunAdmin open source development based on ThinkPHP6+Layui a lightweight high-profile back-end development system . FunAdmin version 3.2.0 there is a security vulnerability , the vulnerability stems from the /databases/database/list through the id parameter found to contain SQL injecti...

CVE-2023-24773

CVE-2023-24773 affects Funadmin v3.2.0. The vulnerability is a SQL injection in the id parameter of the /databases/database/list endpoint. Public summaries consistently describe it as a high-severity issue (CVSS v3.1: 9.8, CRITICAL) with network attack vector, no authentication, and impact to con...

CVE-2023-24777

CVE-2023-24777 is a SQL injection vulnerability affecting Funadmin v3.2.0 exposed via the id parameter in the /databases/table/list endpoint. The root cause is unsafely handling the id input, enabling attack execution likely over network with no user interaction, and resulting in high confidentia...

CVE-2023-24782

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit...

CVE-2023-24773

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list...

CVE-2023-24780

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns...

CVE-2023-24780

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns...

Health Center Patient Record Management System 跨站脚本漏洞

Health Center Patient Record Management System is a Health Center Patient Record Management System by Arvin Arandilla Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Health Center Patient Record Management System version 1.0, which stems from an issue with the...

PT-2023-16842 · Sourcecodester · Sourcecodester Health Center Patient Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Health Center Patient Record Management System, affecting the file birthing print.php. The manipulatio...

CVE-2023-24780

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns...

PT-2023-16803 · Sourcecodester · Sourcecodester Health Center Patient Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Health Center Patient Record Management System, affecting an unknown functionality of the file...

Watu Quiz < 3.3.9.1 - Reflected XSS

The plugin does not sanitise and escape some parameters such as email, dn, date and points before outputting then back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

SQL Injection in 'core/ajax/ajax_data.php'

Description There exists an SQL injection affecting the customerid parameter located in the file core/ajax/ajaxdata.php Let's take a look at the following code: https://github.com/unilogies/bumsys/blob/9dc2de204116297a7e528c38bc3b1e89bf40f907/core/ajax/ajaxdata.phpL537 sql where stockproductid =...