6810 matches found
CVE-2022-4150
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the optionid POST parameter before concatenating it to an SQL query in order-custom-fields-with-and-without-search.php. This may allow malicious users with at least author...
CVE-2022-4156
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the userid POST parameter before concatenating it to an SQL query in ajax-functions-backend.php. This may allow malicious users with at least author privilege to leak sensitive...
PT-2022-25896 · WordPress · Contest Gallery Pro +1
Name of the Vulnerable Software and Affected Versions: Contest Gallery WordPress plugin versions prior to 19.1.5.1 Contest Gallery Pro WordPress plugin versions prior to 19.1.5.1 Description: The issue allows malicious users with at least author privilege to leak sensitive information from the...
WordPress Plugin Contest Gallery SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
ctrlo lenio 安全漏洞
lenio is an open source facility management system from ctrlo. A security vulnerability exists in ctrlo lenio, which stems from an unknown function in its Ticket Handler component lib/Lenio.pm library that operates on the parameter siteid leads allowing an attacker to implement cross-site scripti...
CVE-2022-46121
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/manageproduct&id=...
PT-2022-27742 · Unknown · Helmet Store Showroom Site
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/hss/?page=view product&id=" API endpoint, specifically through the id variable. There is no information provid...
PT-2022-27752 · Unknown · Helmet Store Showroom Site
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns SQL Injection. It can be exploited via the "/hss/admin/brands/manage brand.php" API endpoint, specifically through the id variable. Recommendations: For Helmet Store...
PT-2022-27746 · Unknown · Helmet Store Showroom Site
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/hss/admin/?page=products/view product&id=" endpoint. The id variable is vulnerable to injection attacks...
CVE-2022-44838
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /services/viewservice.php...
Sql injection
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /services/viewservice.php...
Automotive Shop Management System SQL注入漏洞
Automotive Shop Management System is an automotive shop management system by Carlo Montero, an individual developer. A security vulnerability exists in Automotive Shop Management System version v1.0, which originates from an SQL injection via the id parameter in /services/viewservice.php...
CVE-2022-44838
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /services/viewservice.php...
PT-2022-27321 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The Automotive Shop Management System contains a SQL injection issue via the id parameter at the "/services/view service.php" API endpoint. This allows for potential exploitation...
CVE-2022-44838
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /services/viewservice.php...
PT-2022-26561 · Unknown · Shaoxing Background Management System
Name of the Vulnerable Software and Affected Versions: Shaoxing Background Management System affected versions not specified Description: A critical issue has been found in the system, affecting unknown code in the file /Default/Bd. The manipulation of the id argument leads to SQL injection. This...
House Rental System SQL注入漏洞
House Rental System is a house rental management system that allows you to add, modify and delete listings and place reservations. House Rental System suffers from a SQL injection vulnerability that originates from an unknown function in the file /view-property.php, where the operation of the...
xsjczx Shaoxing Background Management System SQL注入漏洞
The xsjczx Shaoxing Background Management System is a background management system from the Chinese company xsjczx punctuation information technology. A SQL injection vulnerability exists in xsjczx Shaoxing Background Management System, which originates from unknown code in the file /Default/Bd,...
Human Resource Management System SQL注入漏洞
Human Resource Management System is a Human Resource Management System by maverickosama Personal Developer. Human Resource Management System suffers from a SQL injection vulnerability that originates from unknown handling of the file /hrm/employeeadd.php, where manipulation of the parameter empid...