PT-2022-25356 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/update traveller.php" API endpoint...

Simple Exam Reviewer Management System SQL注入漏洞

Simple Exam Reviewer Management System is a simple examiner management system. version 1.0 of Simple Exam Reviewer Management System is vulnerable to SQL injection, which stems from a lack of validation of externally entered SQL statements in the id parameter. An attacker could use this...

CVE-2022-40098

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/updateexpense.php...

CVE-2022-40099

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/updateexpensecategory.php...

Sql injection

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/updateexpensecategory.php...

Sql injection

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/updatecurrency.php...

CVE-2022-40485

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /packagedetail.php...

CVE-2022-40483

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /weddingdetails.php...

CVE-2022-40485

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /packagedetail.php...

Sql injection

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /weddingdetails.php...

Sql injection

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /packagedetail.php...

CVE-2022-40403

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/featureedit.php...

Sql injection

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/featureedit.php...

CVE-2022-40485

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /packagedetail.php...

CVE-2022-40483

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /weddingdetails.php...

CVE-2022-40483

CVE-2022-40483 affects Wedding Planner v1.0, where a SQL injection flaw exists in the id parameter of /wedding_details.php. The root cause is lack of input validation against externally entered SQL statements, enabling an attacker to retrieve sensitive database information. The vulnerability is r...

CVE-2022-40483

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /weddingdetails.php...

CVE-2022-40404

CVE-2022-40404 affects Wedding Planner v1.0, a web application. A SQL injection vulnerability exists in the /admin/select.php?id= parameter due to missing input validation. This allows attackers to manipulate SQL commands and potentially exfiltrate or corrupt database data. The CVSS metrics indic...

CVE-2022-40404

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php...

CVE-2022-40403

CVE-2022-40403 concerns Wedding Planner v1.0, which has a SQL injection vulnerability in the web endpoint /admin/feature_edit.php where the vulnerable parameter is the id parameter. The underlying root cause is lack of validation of externally entered SQL statements. According to connected source...