944 matches found
OpenClinic GA Security Vulnerability
OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management. A security vulnerability exists in OpenClinic GA version 5.247.01, which stems from the presence of a Reflective Cross-Site Scripting XS...
CVE-2023-33676
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=" which can be escalated to the remote command execution...
CVE-2023-33676
Sourcecodester Lost and Found Information System, Version 1.0, is vulnerable to unauthenticated SQL injection in the endpoint /items/view (parameter id) via the query string ?page=items/view&id=*, which can escalate to remote command execution. Affected software/component: Sourcecodester Lost and...
CVE-2023-33677
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...
CVE-2023-33677
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...
CVE-2023-33677
CVE-2023-33677 affects Sourcecodester Lost and Found Information System v1.0. The vulnerability is an unauthenticated SQL Injection exposed at the API endpoint ?page=items/view&id=. The root cause is improper input handling for the id parameter, allowing crafted input to influence database querie...
CVE-2023-33677
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...
Student Information System Security Breach
Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A security vulnerability exists in Student Information Systems version v.3053. A remote attacker can explo...
geographic-information-system.cioreview.com Cross Site Scripting vulnerability OBB-3854019
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-6441
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...
CVE-2023-6441
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...
CVE-2023-6441
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection.This issue affects University Information System: before 12.12.2023...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection.This issue affects University Information System: before 12.12.2023...
CVE-2023-6441 SQLi in UNI-PA's University Information System
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...
CVE-2023-6441 SQLi in UNI-PA's University Information System
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...
CVE-2023-6441
The CVE-2023-6441 entry concerns the UNI-PA University Information System, where an SQL Injection flaw arises from improper neutralization of special elements. Affected products/versions: University Information System prior to 12.12.2023. Impact is described (per sources) as high for confidential...
PT-2024-14955 · Unknown · University Information System
Name of the Vulnerable Software and Affected Versions: University Information System versions prior to 12.12.2023 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
CVE-2024-0497
A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...
Sql injection
A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2024-0497 Campcodes Student Information System sql injection
A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...