CVE-2022-47860

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php...

CVE-2022-47866

Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php...

CVE-2022-47865

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php...

PT-2023-15499 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeCategories.php" file. This allows for potential manipulation of database queries. Recommendations: For Lead Management System...

Lead Management System SQL注入漏洞

Lead management system is a lead management system by Mayuri K. Personal developer. SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeCategories.php. An attacker could use th...

Lead Management System SQL注入漏洞

Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the customerid parameter in ajaxrepresent.php. statement in ajaxrepresent.php...

CVE-2022-47866

Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php...

Lead Management System SQL注入漏洞

Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the userid parameter of changePassword.php. An attacker could use this...

CVE-2022-47860

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php...

PT-2023-15498 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the customer id parameter in the "ajax represent.php" file. This allows for potential manipulation of database queries. Recommendations: For Lead Management...

CVE-2022-47865

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php...

CVE-2022-47865

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php...

PT-2023-15497 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeLead.php" endpoint. This allows for potential manipulation of database queries. Recommendations: For Lead Management System...

PT-2023-15500 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeOrder.php" endpoint. This allows for potential manipulation of database queries. No information is provided about the estimate...

CVE-2022-47790

Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=...

Twmap SQL注入漏洞

Twmap is a Taiwan map related document/code in China. Twmap suffers from a SQL injection vulnerability that originates from an unknown function in the file twmap3/data/ajaxCRUD/pointdata2.php, where manipulation of the parameter id results in SQL injection...

PT-2023-13746 · Sourcecodester · Theme Park Ticketing System

Name of the Vulnerable Software and Affected Versions: sourcecodester Theme Park Ticketing System version 1.0 Description: The issue allows remote attackers to view sensitive information. This is achieved via the id parameter to the "/tpts/manage user.php" API endpoint. Recommendations: For...

Snapchat: Delete anyone's content spotlight remotely.

A vulnerability was discovered in Snapchat's Spotlight feature that allowed anyone to delete another user's content remotely. By intercepting and modifying the delete request, an attacker could replace the ID parameter with that of another user's video, resulting in the deletion of their content...

PHP Link Shortener SQL注入漏洞

PHP Link Shortener is a very simple lightweight URL shorter or simpler written in PHP by Mike Harris personal developer. PHP Link Shortener suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter $link id resulting in sql injection...

Fallstudie SQL注入漏洞

Fallstudie is an application by Marcel Boehm Personal Developer. DHBW Fallstudie suffers from a SQL injection vulnerability that stems from unknown functionality in the app/config/passport.js file for component logins, where manipulation of the parameters id/email can lead to SQL injection...