6688 matches found
CVE-2022-36708
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /student/bookdetails.php...
CVE-2022-36704
Summary: CVE-2022-36704 affects Library Management System v1.0, with a SQL injection flaw exploitable via the Id parameter in /librarian/studentdetails.php. Root cause: unsanitized input leading to arbitrary SQL execution. Impact is stated as high in CVSS (CONF: HIGH, INTEG: HIGH, AVAIL: HIGH; sc...
CVE-2022-36704
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /librarian/studentdetails.php...
PT-2022-4462 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability in the /librarian/bookdetails.php component of the Library Management System. This vulnerability allows a remote attacker to execute...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code for attendance and automatic generation of library cards by King Albaracin Individual Developer. A SQL injection vulnerability exists in Library Management System v1.0, which originates from a security issue with the id paramet...
Ingredients Stock Management System SQL注入漏洞
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. version v1.0 of Ingredients Stock Management System is vulnerable to SQL injection, which originates from a security issue in the /stocks/manage The vulnerability is caused by a...
PT-2022-4460 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Id parameter at the "/student/bookdetails.php" API endpoint. It allows a remote attacker to...
CVE-2022-36544
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php...
CVE-2022-36543
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php...
CVE-2022-36543
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php...
CVE-2022-36545
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/settings.php...
CVE-2022-36544
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php...
CVE-2022-36543
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php...
CVE-2022-36679
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser...
CVE-2022-36680
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteschedule...
CVE-2022-36680
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteschedule...
CVE-2022-36682
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletestudent...
Sql injection
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser...
CVE-2022-36682
CVE-2022-36682 affects Simple Task Scheduling System v1.0. The vulnerability is a SQL injection exploitable via the id parameter in /classes/Master.php?f=delete_student. According to the NVD entry, this has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no user interaction r...
Simple Task Scheduling System SQL注入漏洞
Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Task Scheduling System v1.0, which stems from a security issue with the id parameter in /classes/Master.php?f=deletecategory...