6691 matches found
CVE-2022-45328
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/editmembers.php...
CVE-2022-45328
CVE-2022-45328 affects Church Management System v1.0. The vulnerability is a SQL injection via the id parameter in /admin/edit_members.php. Root cause: unsafeguarded construction of SQL queries allowing attacker-controlled input to affect query logic. According to CVSSv3.1, the impact is high on ...
CVE-2022-44860
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/updatestatus.php...
CVE-2022-44859
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manageproduct.php...
CVE-2022-44858
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/viewproduct.php...
CVE-2022-44859
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manageproduct.php...
Automotive Shop Management System SQL注入漏洞
Automotive Shop Management System is an automotive shop management system by Carlo Montero Personal Developer. A security vulnerability exists in Automotive Shop Management System v1.0, which was discovered to contain a SQL injection vulnerability via the id parameter in...
CVE-2022-44859
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manageproduct.php...
CVE-2022-44858
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/viewproduct.php...
CVE-2022-44860
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/updatestatus.php...
The vulnerability of the run_id parameter in the Example Dags function of the Airflow software for data processing tasks allows a attacker to execute arbitrary commands.
The vulnerability of the runid parameter in the Example Dags function of the Airflow software for data processing scenario creation, monitoring, and orchestration is related to incorrect code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary...
CVE-2022-44858
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/viewproduct.php...
CVE-2022-43213
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php...
Billing System Project SQL注入漏洞
Billing System Project is a billing system project by Mayuri K. Individual developer. A security vulnerability exists in Billing System Project v1.0, which was discovered to contain a SQL injection vulnerability via the id parameter in editor.php...
CVE-2022-45536
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...
CVE-2022-43212
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php...
PT-2022-27470 · Aerocms · Aerocms
Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue allows attackers to access database information through a SQL Injection vulnerability. This vulnerability is exploited via the p id parameter at the "/post.php" API endpoint. Recommendations: For...
Student Attendance Management System SQL Injection Vulnerability
Student Attendance Management System is an attendance management system for students.A security vulnerability exists in Student Attendance Management System, which stems from a SQL injection issue in the Id parameter of the /Admin/createClass.php file. No detailed vulnerability details are...
CVE-2022-44415
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/viewmechanic.php?id=...
PT-2022-27318 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/asms/admin/?page=transactions/manage transaction&id=" endpoint, specifically through the id variable...