6686 matches found
CVE-2022-30401
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/?p=viewproduct&id=...
CVE-2022-30400
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/orders/vieworder.php?view=user&id=...
Merchandise Online Store SQL注入漏洞
Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/?page=maintenance/managecategory& id= to conduct an SQL injection attack...
College Management System SQL注入漏洞
College Management System is a simple project. It is used to record students, teachers, subjects, schedules and all things related to the university. College Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attack via...
Merchandise Online Store SQL注入漏洞
Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/?page=inventory/manageinventory& id= for SQL injection attacks...
CVE-2022-30002
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nomineeid=...
CVE-2022-29999
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?clientid=...
CVE-2022-29738
Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id...
CVE-2022-29982
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manageservice.php?id=...
Simple Client Management System SQL注入漏洞
Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Users.php ? f=delete in the post request id parameter...
PT-2022-19958 · Unknown · Insurance Management System
Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue allows for SQL Injection via the "/insurance/editClient.php" endpoint, specifically through the client id variable. This could potentially lead to unauthorized access or...
PT-2022-19961 · Unknown · Insurance Management System
Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue allows for SQL Injection via the "/insurance/editAgent.php?agent id=" endpoint, where an attacker can manipulate the agent id variable to inject malicious SQL code. Recommendation...
Simple Client Management System SQL注入漏洞
Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Master. php?f=deleteclient in the post request id...
Simple Client Management System SQL注入漏洞
Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Master. php?f=deleteinvoice, the id parameter of the...
CVE-2022-29008
An insecure direct object reference IDOR vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive information...
CVE-2022-29656
Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/packagedetail.php...
CVE-2022-29656
Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/packagedetail.php...
CVE-2022-29656
Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/packagedetail.php...
CVE-2022-29656
The CVE-2022-29656 entry concerns Wedding Management System v1.0, where a SQL injection vulnerability exists in the id parameter of /Wedding-Management/package_detail.php. The underlying issue is lack of validation of external input in the id parameter, enabling crafted input to manipulate SQL co...
Wedding Management System SQL注入漏洞
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. version 1.0 of Wedding Management System is vulnerable to a SQL injection vulnerability in /Wedding-Management/package detail.php. The vulnerability is caused by a lack of validation o...