6810 matches found
CVE-2022-43329
CVE-2022-43329 corresponds to a SQL injection in Canteen Management System v1.0, exploitable via the id parameter on /print.php. The vulnerability affects confidentiality, integrity, and availability (CVSS v3.1 base score 7.2; AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The connected data confirms the ...
CVE-2022-43329
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
CVE-2022-43330
CVE-2022-43330 affects Canteen Management System v1.0. A SQL injection is triggered by the id parameter in /editorder.php, enabling potentially unauthorized data access or modification. The vulnerability is classified with CVSS v3.1: Base score 7.2 (HIGH), vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/...
CVE-2022-43125
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...
Sanitization Management System SQL注入漏洞
Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. Sanitization Management System v1.0 suffers from a SQL injection vulnerability, which was discovered via the id parameter of /php-sms/classes/Master.php?f=deleteservice contains a SQL injection...
CVE-2022-43331
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpaction/printOrder.php...
CVE-2022-43127
CVE-2022-43127 affects Online Diagnostic Lab Management System v1.0, with a SQL injection vulnerability in the id parameter of /appointments/update_status.php. The CVSSv3.1 vector is AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating network vector, low attack complexity, high impact on confidential...
CVE-2022-43126
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/managetest.php...
CVE-2022-43126
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/managetest.php...
CVE-2022-43124
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser...
CVE-2022-43328
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php...
CVE-2022-43127
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/updatestatus.php...
Canteen Management System SQL注入漏洞
Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. Canteen Management System v1.0 suffers from a SQL injection vulnerability, which stems from the id parameter on /phpaction/printOrder.php found to contain a SQL injection vulnerability...
PT-2022-26866 · Unknown · Sanitization Management System
Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/php-sms/classes/Master.php?f=delete service" endpoint...
Canteen Management System SQL注入漏洞
Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. Canteen Management System v1.0 suffers from a SQL injection vulnerability, which stems from an id parameter on /editorder.php found to contain a SQL injection vulnerability...
CVE-2022-42923
Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker with the role of student to perform a SQL injection on the 'id' parameter in the 'appCore/index.php?r=adm/mediagallery/delete'...
CVE-2022-42923 SQL injection in Forma LMS
Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker with the role of student to perform a SQL injection on the 'id' parameter in the 'appCore/index.php?r=adm/mediagallery/delete'...
PT-2022-24055 · Unknown · Sourcecodester Train Scheduler App
Name of the Vulnerable Software and Affected Versions: SourceCodester Train Scheduler App version 1.0 Description: A critical issue affects some unknown functionality of the file "/train scheduler app/?action=delete". The manipulation of the id argument leads to improper control of resource...
