6688 matches found
CVE-2022-42923
Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker with the role of student to perform a SQL injection on the 'id' parameter in the 'appCore/index.php?r=adm/mediagallery/delete'...
CVE-2022-42923 SQL injection in Forma LMS
Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker with the role of student to perform a SQL injection on the 'id' parameter in the 'appCore/index.php?r=adm/mediagallery/delete'...
PT-2022-24055 · Unknown · Sourcecodester Train Scheduler App
Name of the Vulnerable Software and Affected Versions: SourceCodester Train Scheduler App version 1.0 Description: A critical issue affects some unknown functionality of the file "/train scheduler app/?action=delete". The manipulation of the id argument leads to improper control of resource...
Reflected XSS on ID parameter
Description Vulnerable code " Proof of Concept https://demo.bumsys.org/xhr/?icheck=false&module=accounts&page=editAccount&id=test"...
CVE-2022-43168
Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reportsid parameter...
PT-2022-26785 · Unknown · Rukovoditel
Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A SQL injection issue was discovered, which can be exploited via the reports id parameter. Recommendations: For Rukovoditel version 3.2.1, consider restricting access to the reports id parameter until a...
CVE-2022-43229
Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/updatestatus.php...
PT-2022-26808 · Unknown · Canteen Management System
Name of the Vulnerable Software and Affected Versions: Canteen Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the userid parameter at the "/php action/fetchSelectedUser.php" API endpoint. Recommendations: F...
CVE-2022-43230
Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/viewdetails...
Simple Cold Storage Management System SQL注入漏洞
Simple Cold Storage Management System is a Simple Cold Storage Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Cold Storage Management System version 1.0, which originates from the id parameter of /admin/?page=bookings/viewdetails being...
Rukovoditel SQL注入漏洞
Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management, customer relationship management and other functions. A security vulnerability exists in Rukovoditel version 3.2.1, which stems from the reportsid parameter...
PT-2022-26804 · Unknown · Simple Cold Storage Management System
Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/bookings/update status.php" API endpoint. Recommendations:...
CVE-2022-39976
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /modules/announcement/index.php?view=edit&id=...
CVE-2022-3714
A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/vieworder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-2123...
PT-2022-25152 · Unknown · School Activity Updates With Sms Notification
Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: A SQL injection issue was discovered via the id parameter at the "/modules/announcement/index.php?view=edit&id=" endpoint. This allows for potential exploitation of the SQ...
CVE-2022-3671
A vulnerability classified as critical was found in SourceCodester eLearning System 1.0. This vulnerability affects unknown code of the file /admin/students/manage.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2022-3671
A vulnerability classified as critical was found in SourceCodester eLearning System 1.0. This vulnerability affects unknown code of the file /admin/students/manage.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2022-42021
Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=...