PT-2026-98354

Name of the Vulnerable Software and Affected Versions phpIPAM versions prior to 1.8.4 Description Incorrect authorization exists in the api/controllers/User.php file when the id variable is set to "admins" or "all". Recommendations Update to version 1.8.4 or later...

CVE-2026-5081

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId added in version 1.54 uses the value of the UNIQUEID environment variable for the session id. The UNIQUEID variable is set by the Apache moduniqueid...

CVE-2026-5081 Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId added in version 1.54 uses the value of the UNIQUEID environment variable for the session id. The UNIQUEID variable is set by the Apache moduniqueid...

EUVD-2020-14172

Malware in sbrugna...

PT-2024-25589 · Unknown · E-Negosyo System

Name of the Vulnerable Software and Affected Versions: E-Negosyo System version 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server. This could enable the retrieval of all information stored in the id variable i...

CVE-2024-27176: Improper Limitation of a Pathname to a Restricted Directory

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying session ID variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than...

CVE-2020-21400

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function...

CVE-2020-21400: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function...

CVE-2020-21400

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function...

PT-2022-24603 · Unknown · Garage Management System

Name of the Vulnerable Software and Affected Versions: Garage Management System version 1.0 Description: The issue allows for arbitrary code execution. This can be achieved via the "ip/garage/php action/editProductImage.php" endpoint, specifically by manipulating the id variable. Recommendations:...

PT-2022-20712

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/ordering/admin/store/index.php?view=edit&id=" API endpoint, specifically through the id variable. This...

PT-2022-21244

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/?page=user/manage user&id= endpoint. The id variable is vulnerable to SQL injection...

PT-2022-21237

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue allows for SQL Injection via the "/ffos/admin/categories/manage category.php?id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized dat...

PT-2022-21265

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/fields/view field.php" endpoint, specifically through the id variable. This allows for potential unauthorized access and manipulation of...

PT-2022-21035

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/bcms/admin/services/view service.php?id=" API endpoint. The id variable is vulnerable to injection attacks...

PT-2022-21029

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue allows for SQL Injection via the "/bcms/admin/?page=service transactions/manage service transaction&id=" API endpoint, specifically through the id variable. This could...

PT-2022-21038

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection via the "/eris/admin/user/index.php?view=edit&id=" endpoint. The id variable is vulnerable to SQL injection attacks. No information is provided abo...

PT-2022-21027

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue allows for SQL Injection via the /bcms/admin/?page=sales/manage sale&id= API endpoint, specifically through the id variable. This could potentially lead to unauthorized data...

PT-2022-21024

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /bcms/admin/?page=court rentals/view court rental&id= endpoint, specifically through the id variable...

PT-2022-21039

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "/eris/admin/applicants/index.php?view=view&id=" endpoint. The id variable is vulnerable to injection attacks. No...