4246 matches found
Sql injection
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...
GitHub Security Lab: [python] TarSlip vulnerability improvements
Vulnerability description not provided...
CVE-2022-43135
The CVE-2022-43135 entry concerns Online Diagnostic Lab Management System v1.0 with a SQL injection flaw in the login flow. Affected component: /diagnostic/login.php, where the username parameter is injectable. Root cause: unsafeguarded handling of user input enabling arbitrary SQL execution. Imp...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. A security vulnerability exists in Online Diagnostic Lab Management System v1.0, which stems from the manipulation of the username parameter in its /diagnostic/login.php component that allows an attacker to...
PT-2022-26768 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the "/diagnostic/login.php" API endpoint. Recommendation...
CVE-2022-43135
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...
CVE-2022-43135
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...
The vulnerability of the web application’s Online Diagnostic Lab Management System lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL queries.
The vulnerability of the Web application, the Online Diagnostic Lab Management System, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the...
CVE-2022-43058
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=deleteactivity...
CVE-2022-43058
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=deleteactivity...
Sql injection
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=deleteactivity...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. A security vulnerability exists in Online Diagnostic Lab Management System v1.0, which was discovered to contain an SQL injection vulnerability via the id parameter on /odlms//classes/Master.php?f=deleteactivit...
CVE-2022-43058
The CVE-2022-43058 entry relates to Online Diagnostic Lab Management System v1.0, which contains a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delete_activity. Exploitation details are not provided in the documents, and no patch/version remediation is stated. ...
CVE-2022-43058
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=deleteactivity...
PT-2022-26733 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/odlms//classes/Master.php?f=delete activity" API endpoin...
CVE-2022-43051
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=deletetest...
CVE-2022-43051
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=deletetest...
CVE-2022-43052
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete...