6691 matches found
PT-2022-27217 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue concerns SQL Injection. It can be exploited via the "/asms/admin/services/manage service.php" endpoint, specifically through the id variable. Recommendations: For Automotive...
Automotive Shop Management System SQL注入漏洞
Automotive Shop Management System is an automotive shop management system by the individual developer Carlo Montero. Automotive Shop Management System v1.0 suffers from a SQL injection vulnerability. The vulnerability stems from a lack of validation of the...
PT-2022-27216 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the /asms/admin/mechanics/manage mechanic.php endpoint, specifically through the id parameter. Recommendations: For...
PT-2022-27218 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the /asms/admin/mechanics/view mechanic.php endpoint, specifically through the id parameter. Recommendations: For...
CVE-2022-43163
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/viewclient.php...
CVE-2022-43163
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/viewclient.php...
CVE-2022-43163
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/viewclient.php...
PT-2022-26780 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/clients/view client.php" API endpoint. Recommendations:...
CVE-2022-43162
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/viewtest.php...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. v1.0 of Online Diagnostic Lab Management System has a security vulnerability that stems from the inclusion of SQL injection via the id parameter in /tests/viewtest.php. No detailed vulnerability details are...
Student Attendance Management System SQL注入漏洞
Student Attendance Management System is an attendance management system for students.A security vulnerability exists in Student Attendance Management System, which stems from a SQL injection issue in the Id parameter of the /Admin/createClass.php file. No detailed vulnerability details are...
Simple Image Gallery Web App SQL注入漏洞
Simple Image Gallery Web App is a web-based application that can be managed by multiple users. Users can store their images in this web application. A SQL injection vulnerability exists in Simple Image Gallery Web App version 1.0, which originates from an SQL injection via the id parameter on the...
PT-2022-25223 · Unknown · Hospital Management Center
Name of the Vulnerable Software and Affected Versions: Hospital Management Center affected versions not specified Description: A critical issue has been found in Hospital Management Center, affecting an unknown function of the file patient-info.php. The manipulation of the pt id argument leads to...
CVE-2021-38819
A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the album page...
Arbitrary Code Execution
apacheairflow is vulnerable to arbitrary code execution. The vulnerability exists in example DAGs of examplebashoperator.py which allows an attacker to execute arbitrary commands via the manually provided runid parameter...
PT-2022-25155 · Unknown · Monikabrzica Scm
Name of the Vulnerable Software and Affected Versions: MonikaBrzica scm affected versions not specified Description: A critical issue was found in MonikaBrzica scm, affecting an unknown part of the file uredi korisnika.php. The manipulation of the id argument leads to sql injection. It is possibl...
MonikaBrzica scm 安全漏洞
scm is a supply chain management software by MonikaBrzica Individual Developer. A security vulnerability exists in MonikaBrzica scm, which stems from some unknown function of its upisubazu.php component that operates on the email/lozinka/ime/id parameter, leading to an attacker to implement SQL...
MonikaBrzica scm 安全漏洞
MonikaBrzica scm is a supply chain management software from the MonikaBrzica personal developer. monikaBrzica scm is vulnerable to SQL injection, which stems from the unknown part of its uredikorisnika.php component that lacks validation of external input SQL statements for the id parameter, whic...
PT-2022-5600 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.4.0 Description: A vulnerability in Example Dags of Apache Airflow is related to incorrect management of code generation. This issue allows an attacker with UI access who can trigger DAGs to execute arbitrar...