PT-2022-21052

Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/car-rental-management-system/admin/view car.php" API endpoint, specifically through the id variable...

PT-2022-21038

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection via the "/eris/admin/user/index.php?view=edit&id=" endpoint. The id variable is vulnerable to SQL injection attacks. No information is provided abo...

PT-2022-21003

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "/rdms/admin/respondent types/manage respondent type.php" API endpoint, specifically through the id variable. Recommendatio...

PT-2022-21014

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the "/ofrs/admin/?page=teams/manage team&id=" API endpoint, specifically through the id variable. This could potentially lead to unauthorized access or...

PT-2022-20997

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "/rdms/admin/incident reports/manage report.php" API endpoint, specifically through the id variable. Recommendations For...

PT-2022-21015

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the "/ofrs/admin/?page=teams/view team&id=" API endpoint, specifically through the id variable. This could potentially lead to unauthorized access or...

PT-2022-20709

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ocwbs/admin/services/view service.php?id=" endpoint, specifically through the id variable. No information is...

PT-2022-20706

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ocwbs/admin/vehicles/manage vehicle.php" endpoint, specifically through the id variable. Recommendations For...

PT-2022-20998

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the id variable in the "rdms/admin/teams/view team.php" API endpoint. Recommendations For Rescue Dispatch Management System...

PT-2022-20692

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue is related to SQL Injection. It can be exploited via the "/ordering/admin/stockin/index.php?view=edit&id=" endpoint. The id variable is vulnerable to SQL injection attacks...

PT-2022-20122

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue is related to SQL Injection via the /bcms/classes/Master.php?f=delete court rental endpoint, specifically affecting the id variable. This allows for potential exploitation of...

PT-2022-20108

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The Covid-19 Travel Pass Management System is affected by a SQL Injection issue. This issue can be exploited via the ctpms/admin/?page=user/manage user&id= endpoint, specifically...

PT-2022-20076

Name of the Vulnerable Software and Affected Versions Air Cargo Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/acms/admin/cargo types/view cargo type.php" endpoint, specifically through the id variable. This allows for potential...

PT-2022-20101

Name of the Vulnerable Software and Affected Versions Pharmacy Sales And Inventory System version 1.0 Description The issue allows for SQL Injection via the /pharmacy-sales-and-inventory-system/manage user.php API endpoint, specifically through the id variable. This could potentially lead to...

PT-2022-20096

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/admin/orders/view order.php?view=user&id= endpoint, specifically through the id variable. No...

PT-2022-19809

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns SQL Injection via the "/mtms/admin/?page=transaction/send&id=" endpoint, where the id variable is vulnerable. This allows for potential manipulation of database querie...

PT-2022-19946

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue allows for SQL Injection via the "/cms/admin/?page=client/view client&id=" API endpoint, specifically through the id variable. This could potentially lead to unauthorized access...

CVE-2019-16975

In FusionPBX up to 4.5.7, the file app\contacts\contactnotes.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS...

CVE-2019-16975: Improper Neutralization of Input During Web Page Generation

In FusionPBX up to 4.5.7, the file app\contacts\contactnotes.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS...

CVE-2019-16972

In FusionPBX up to 4.5.7, the file app\contacts\contactaddresses.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS...