6692 matches found
CVE-2023-24197
Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...
CVE-2023-0673
A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file oews/?p=products/viewproduct.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...
Sql injection
A vulnerability was found in fanzila WebFinance 0.5 and classified as critical. This issue affects some unknown processing of the file htdocs/admin/savetaxes.php. The manipulation of the argument id leads to sql injection. The patch is named 306f170ca2a8203ae3d8f51fb219ba9e05b945e1. It is...
WebFinance SQL注入漏洞
WebFinance is a web application for managing invoices and handling customer contacts. A SQL injection vulnerability exists in WebFinance version 0.5, which stems from a problem with the handling of unknowns in the file htdocs/admin/savetaxes.php, where manipulation of the parameter id can lead to...
PT-2023-10006 · Unknown · Fanzila Webfinance
Name of the Vulnerable Software and Affected Versions: fanzila WebFinance version 0.5 Description: A critical issue has been found in fanzila WebFinance, affecting an unknown function of the file htdocs/admin/save roles.php. The manipulation of the id argument leads to sql injection...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter bookingid that can lead to sq...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql...
PT-2023-16364 · Unknown · Sourcecodester Online Tours & Travels Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file admin/practice pdf.php. The manipulation of the id argument leads to SQL...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can le...
PT-2023-16336 · Sourcecodester · Sourcecodester Online Tours & Travels Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue affects the processing of the file admin/approve user.php, where the manipulation of the id argument leads to sql injection. The attack can be...
CVE-2023-23492
The Login with Phone Number WordPress Plugin, version 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwpforgotpassword' action...
CVE-2022-48152
SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php...
CVE-2022-48152
SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php...
PT-2023-15095 · Nexusphp · Nexusphp
Name of the Vulnerable Software and Affected Versions: NexusPHP versions prior to 1.7.33 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to reflective cross-site scripting XSS attacks. This can be achieved by injecting malicious input int...
CVE-2023-0290 Rapid7 Velociraptor directory traversal in client ID parameter
Rapid7 Velociraptor did not properly sanitize the client ID parameter to the CreateCollection API, allowing a directory traversal in where the collection task could be written. It was possible to provide a client id of "../clients/server" to schedule the collection for the server as a server...
Online Food Ordering System SQL注入漏洞
Online Food Ordering System is an online food ordering system. an SQL injection vulnerability exists in Online Food Ordering System, which stems from a problem with some unknown functions in the file viewprod.php, where manipulation of the parameter id can lead to sql injection. No details of the...
PT-2023-16158 · Sourcecodester · Sourcecodester Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical issue was found in the SourceCodester Online Food Ordering System, affecting some unknown functionality of the file view prod.php. The...
CVE-2022-46956
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...