4245 matches found
Sql injection
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/viewappointment...
CVE-2022-43066
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=deletemessage...
CVE-2022-43227
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/viewappointment...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. Online Diagnostic Lab Management System v1.0 has a SQL injection vulnerability, which can be exploited by an attacker to perform SQL injection via the id parameter of classes/Master.php?f=deletereservation...
CVE-2022-43226
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/viewappointment...
CVE-2022-43068
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...
PT-2022-26737 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete reservation" endpoint...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which can be exploited by an attacker to perform SQL injection via the id parameter of...
CVE-2022-43066
CVE-2022-43066 applies to Online Diagnostic Lab Management System v1.0, with a SQL injection vulnerability exploitable via the id parameter in /odlms/classes/Master.php?f=delete_message. The issue stems from improper handling/validation of user-supplied input, allowing attacker-controlled SQL on ...
CVE-2022-43068
CVE-2022-43068 affects Online Diagnostic Lab Management System v1.0, with a SQL injection flaw in id parameter of /classes/Master.php?f=delete_reservation. The issue stems from improper input handling; CVSS v3.1 metrics indicate a HIGH impact (C/H/I/A) with a base score of 7.2, network attack vec...
CVE-2022-43226
Affected software: Online Diagnostic Lab Management System v1.0. Vulnerability: SQL injection via the id parameter in /odlms/?page=appointments/view_appointment due to improper input handling. Impact: as per CVSS metrics, High for confidentiality, integrity, and availability (authenticated remote...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system that provides a variety of diagnostic tasks online. online Diagnostic Lab Management System is vulnerable to SQL injection in version v1.0. The vulnerability stems from the affected version not properly filterin...
PT-2022-26802 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/odlms/admin/?page=appointments/view appointment" endpoin...
PT-2022-26736 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/odlms/classes/Master.php?f=delete message" API endpoint...
CVE-2022-43227
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/viewappointment...
CVE-2022-43227
CVE-2022-43227 affects Online Diagnostic Lab Management System v1.0. The vulnerability is a SQL injection via the id parameter at /odlms/admin/?page=appointments/view_appointment. CVSS v3.1 base score 7.2 (HIGH) with network attack vector, low complexity, and privileges required: HIGH; impacts to...
CVE-2022-43066
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=deletemessage...
CVE-2022-43226
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/viewappointment...
