6688 matches found
Sql injection
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...
Sql injection
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/ajax.php?action=deleteborrower...
CVE-2022-41407
CVE-2022-41407 affects Online Pet Shop We App v1.0, with a SQL injection vulnerability exploitable via the id parameter in /admin/?page=orders/view_order. CVSS 3.1 base score 7.2 (HIGH) with NETWORK attack vector, LOW complexity, HIGH privileges required, no user interaction, and impact to confid...
CVE-2022-41530
Open Source SACCO Management System v1.0 is affected by a SQL injection in the id parameter of /sacco_shield/ajax.php?action=delete_borrower. Root cause: improper handling of user input leads to injection. Consequences per CVSS: high impact on confidentiality, integrity, and availability; exploit...
CVE-2022-41408
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...
Online Pet Shop We App SQL Injection Vulnerability (CNVD-2022-69155)
Online Pet Shop We App is an online pet store web application. A SQL injection vulnerability exists in Online Pet Shop We App v1.0, which stems from an SQL injection in the id parameter. No details of the vulnerability are available at this time...
CVE-2022-41377
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /petshop/admin/?page=maintenance/managecategory...
CVE-2022-41378
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /petshop/admin/?page=inventory/manageinventory...
CVE-2022-41515
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/ajax.php?action=deletepayment...
CVE-2022-41514
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/ajax.php?action=deleteloan...
PT-2022-25828 · Unknown · Online Pet Shop We App
Name of the Vulnerable Software and Affected Versions: Online Pet Shop We App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/pet shop/admin/?page=maintenance/manage category" API endpoint...
CVE-2022-41377
CVE-2022-41377 affects Online Pet Shop We App v1.0. The vulnerability is a SQL injection in the id parameter of the endpoint /pet_shop/admin/?page=maintenance/manage_category. Per CVSS v3.1, it has AV:N, AC:L, PR:H, UI:N, S:U, C:H, I:H, A:H (base score 7.2, HIGH). Exploitation requires high privi...
CVE-2022-41378
CVE-2022-41378 affects Online Pet Shop We App v1.0, with a SQL injection vulnerability in the id parameter of /pet_shop/admin/?page=inventory/manage_inventory. The issue stems from unsafely constructed SQL in that endpoint, enabling potentially unauthorized data access or manipulation. The CVSS 3...
CVE-2022-41515
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/ajax.php?action=deletepayment...
CVE-2022-41378
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /petshop/admin/?page=inventory/manageinventory...
CVE-2022-41355
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leavesystem/classes/Master.php?f=deletedepartment...
The vulnerability of the “id” parameter in the “content.php” script of the Webexcels Ecommerce CMS allows a hacker to execute XSS attacks.
The vulnerability of the “id” parameter in the “content.php” script of the Webexcels Ecommerce CMS system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...
The vulnerability of the “id” parameter in the “team.php”, “player.php”, and “club.php” scripts of the KandNconcepts Club CMS allows a hacker to perform XSS attacks.
The vulnerability of the “id” parameter in the “team.php”, “player.php”, and “club.php” scripts of the KandNconcepts Club CMS exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...