6692 matches found
Exploit for SQL Injection in Tyk
Disclaimer For educational purpose only! Details Proof of...
PT-2023-32368 · Sourcecodester · Sourcecodester Task Reminder System
Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A critical issue affects some unknown functionality of the file classes/Users.php?f=delete. The manipulation of the id argument leads to sql injection. The attack may be launched...
PT-2023-32348 · Unknown · Sourcecodester Task Reminder System
Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /classes/Master.php?f=save reminder. The manipulation of the id argument leads to SQL injection. This issue ca...
flusity CMS Security Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in Flusity CMS, which stems from the parameter menuid in the loadPostAddForm function of core/tools/posts.php that can lead to cross-site scripting...
PT-2023-32341 · Unknown · Sourcecodester Simple Real Estate Portal System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Real Estate Portal System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file view estate.php. The manipulation of the id argument leads to SQL injection. This issue can be...
TONGDA Office Anywhere SQL Injection Vulnerability
TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere V11.10 and earlier, v2017, which originates from an unknown function /manage/deletequery.php in the component General News, which causes an SQL injection via the parameter...
PT-2023-32940
Name of the Vulnerable Software and Affected Versions encoded id-rails versions before 1.0.0.beta2 Description The issue is an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an...
Netentsec NS-ASG Application Security Gateway SQL Injection Vulnerability
Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from an SQL injection vulnerability in the parameter GWLinkId in the file...
PT-2023-32258 · Tongda · Tongda Oa 2017
Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions prior to 11.10 Description: A critical vulnerability has been found in Tongda OA 2017, affecting the file general/hr/training/record/delete.php. The manipulation of the RECORD ID argument leads to sql injection. The...
Tongda OA 2017 SQL Injection Vulnerability
Tongda2000 is a web-based intelligent office system from China Tongda Tongda. A security vulnerability exists in Tongda OA 2017 version, which originates from the existence of an unknown part of the file general/hr/training/record/delete.php, which leads to sql injection via the parameter RECORDI...
Evolution CMS 跨站脚本漏洞
Evolution CMS is an open source PHP-based content management system CMS. Evolution CMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the uid parameter, which can be exploited by an attacker to execute...
CVE-2023-46007
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editstaff.php...
CVE-2023-46006
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edituser.php...
CVE-2023-46005
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editbranch.php...
CVE-2023-46007
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editstaff.php...
CVE-2023-46007
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editstaff.php...
PT-2023-29789 · Sourcecodester · Sourcecodester Best Courier Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Best Courier Management System version 1.0 Description: The issue is related to SQL Injection, which occurs via the id parameter in the "/edit branch.php" API endpoint. This allows for potential exploitation. No information is...
Best Courier Management System SQL Injection Vulnerability
Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System version 1.0, which was discovered to contain an SQL injection vulnerability via the id parameter in the /editbranch.php function...
The vulnerability of the software for creating wireless routers based on Debian RaspAP, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary commands.
The vulnerability of the software for creating wireless routers based on Debian RaspAP is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted POST request with t...