CVE-2022-41416

CVE-2022-41416: The Online Tours & Travels Management System v1.0 has a SQL injection vulnerability exploit via the id parameter in /user/update_booking.php. Affects the system’s booking update endpoint; attacker-controlled id can lead to unauthorized data access and potential data integrity impa...

CVE-2022-41536

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageuser.php...

CVE-2022-41536

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageuser.php...

CVE-2022-41408

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

CVE-2022-41408

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

CVE-2022-41407

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

Sql injection

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/ajax.php?action=deleteborrower...

Sql injection

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

CVE-2022-41530

Open Source SACCO Management System v1.0 is affected by a SQL injection in the id parameter of /sacco_shield/ajax.php?action=delete_borrower. Root cause: improper handling of user input leads to injection. Consequences per CVSS: high impact on confidentiality, integrity, and availability; exploit...

CVE-2022-41407

CVE-2022-41407 affects Online Pet Shop We App v1.0, with a SQL injection vulnerability exploitable via the id parameter in /admin/?page=orders/view_order. CVSS 3.1 base score 7.2 (HIGH) with NETWORK attack vector, LOW complexity, HIGH privileges required, no user interaction, and impact to confid...

CVE-2022-41408

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

Online Pet Shop We App SQL Injection Vulnerability (CNVD-2022-69155)

Online Pet Shop We App is an online pet store web application. A SQL injection vulnerability exists in Online Pet Shop We App v1.0, which stems from an SQL injection in the id parameter. No details of the vulnerability are available at this time...

CVE-2022-41378

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /petshop/admin/?page=inventory/manageinventory...

CVE-2022-41377

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /petshop/admin/?page=maintenance/managecategory...

CVE-2022-41514

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/ajax.php?action=deleteloan...

CVE-2022-41515

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/ajax.php?action=deletepayment...

CVE-2022-41378

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /petshop/admin/?page=inventory/manageinventory...

CVE-2022-41515

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/ajax.php?action=deletepayment...

CVE-2022-41378

CVE-2022-41378 affects Online Pet Shop We App v1.0, with a SQL injection vulnerability in the id parameter of /pet_shop/admin/?page=inventory/manage_inventory. The issue stems from unsafely constructed SQL in that endpoint, enabling potentially unauthorized data access or manipulation. The CVSS 3...

PT-2022-25828 · Unknown · Online Pet Shop We App

Name of the Vulnerable Software and Affected Versions: Online Pet Shop We App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/pet shop/admin/?page=maintenance/manage category" API endpoint...