6703 matches found
CVE-2024-33292
SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2024-33292
SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2024-33292
SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...
LAKELEC Website SQL注入漏洞
LAKELEC Website is the official website of LAKELEC Corporation. LAKELEC Website suffers from a SQL injection vulnerability that could allow a remote attacker to obtain sensitive information via the id parameter...
The vulnerability of the `ls_get_popup_markup()` function in the `assets/wp/actions.php` script of the LayerSlider plugin for the WordPress content management system allows a hacker to execute arbitrary SQL queries.
The vulnerability of the lsgetpopupmarkup function in the assets/wp/actions.php script of the LayerSlider plugin for the WordPress content management system is related to the lack of protection for the SQL query structure when processing the id parameter. Exploiting this vulnerability allows an...
CVE-2024-4307
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints /accounts/activities.php?id=1, /accounts/view-deposit.php?id=1, /accounts/viewcards. php?id=1,...
CVE-2024-4308
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints...
CVE-2024-4307 SQL injection vulnerability in HubBank
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints /accounts/activities.php?id=1, /accounts/view-deposit.php?id=1, /accounts/viewcards. php?id=1,...
CVE-2024-4307 SQL injection vulnerability in HubBank
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints /accounts/activities.php?id=1, /accounts/view-deposit.php?id=1, /accounts/viewcards. php?id=1,...
CVE-2024-4308 SQL injection vulnerability in HubBank
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints...
PT-2024-30277 · Hubbank · Hubbank
Name of the Vulnerable Software and Affected Versions: HubBank version 1.0.2 Description: The issue is a SQL injection vulnerability that could allow an attacker to send a specially crafted SQL query to the database through different endpoints, such as "/accounts/activities.php?id=1",...
VulnCheck KEV: CVE-2020-11530
A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The vulnerability is introduced in the id GET parameter supplied to getscript/index.php, and allows an attacker to execute arbitrary SQL queries in the context of the WP database user...
CVE-2024-28322
SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the eventid parameter in a crafted POST request...
CVE-2024-28613
SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the taskid parameter of the task-details.php, and edit-task.php component...
CVE-2024-4093
A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file viewapplication.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit ha...
PT-2024-29145 · Sourcecodester · Sourcecodester Simple Subscription Website
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Subscription Website version 1.0 Description: A critical issue was found in the software, affecting an unknown function of the file view application.php. The manipulation of the id argument leads to SQL injection. It is...
CVE-2024-31545
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manageuser&id=6...
PT-2024-24133 · Unknown · Computer Laboratory Management System
Name of the Vulnerable Software and Affected Versions: Computer Laboratory Management System version 1.0 Description: The issue allows for SQL Injection via the "id" parameter of the "/admin/?page=user/manage user&id=6" API endpoint. This means an attacker could potentially inject malicious SQL...