CVE-2022-43127

CVE-2022-43127 affects Online Diagnostic Lab Management System v1.0, with a SQL injection vulnerability in the id parameter of /appointments/update_status.php. The CVSSv3.1 vector is AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating network vector, low attack complexity, high impact on confidential...

CVE-2022-43124

CVE-2022-43124 affects Online Diagnostic Lab Management System v1.0. The vulnerability is a SQL injection in the /admin/?page=user/manage_user endpoint triggered by the id parameter due to insufficient input validation. CVSS v3.1 base score 7.2 (HIGH) with impacts on confidentiality, integrity, a...

CVE-2022-43125

The CVE-2022-43125 entry corresponds to SQL injection in Online Diagnostic Lab Management System v1.0. The vulnerability is triggered via the id parameter at /appointments/manage_appointment.php, caused by insufficient input validation. Affected component: web application endpoint handling appoin...

CVE-2022-43126

CVE-2022-43126 affects Online Diagnostic Lab Management System v1.0. A SQL injection vulnerability exists via the id parameter in /admin/tests/manage_test.php. The CVSS v3.1 base score is 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required: HIGH; no user interact...

PT-2022-26766 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/tests/manage test.php" API endpoint...

PT-2022-26765 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/appointments/manage appointment.php" API endpoint...

PT-2022-26764 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/?page=user/manage user" API endpoint...

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which was discovered to contain an SQL injection vulnerability via the id parameter of /admin/tests/managetest.php...

CVE-2022-43126

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/managetest.php...

CVE-2022-43125

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...

GitHub Security Lab: C/C++: Command injection via wordexp

Vulnerability description not provided...

GitHub Security Lab: [CPP]: Add query for CWE-125 Out-of-bounds Read with different interpretation of the string when use mbtowc

Vulnerability description not provided...

MiniDVBLinux 5.4 Config Download Exploit

Summary MiniDVBLinuxTM Distribution MLD. MLD offers a simple way to convert a standard PC into a Multi Media Centre based on the Video Disk Recorder VDR by Klaus Schmidinger. Features of this Linux based Digital Video Recorder: Watch TV, Timer controlled recordings, Time Shift, DVD and MP3 Replay...

MiniDVBLinux 5.4 Remote Root Command Execution Vulnerability

Summary MiniDVBLinuxTM Distribution MLD. MLD offers a simple way to convert a standard PC into a Multi Media Centre based on the Video Disk Recorder VDR by Klaus Schmidinger. Features of this Linux based Digital Video Recorder: Watch TV, Timer controlled recordings, Time Shift, DVD and MP3 Replay...

CVE-2022-42064

Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell...

CVE-2022-42064

Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell...

Sql injection

Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell...

CVE-2022-42064

Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell...

CVE-2022-42064

The CVE-2022-42064 entry relates to Online Diagnostic Lab Management System version 1.0, where a SQL injection flaw allows remote authentication bypass and subsequent upload of a shell. This affects the login/authentication/remote file upload flow, enabling an attacker with network access to bypa...

PT-2022-26228 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue concerns a remote exploit that bypasses login using SQL injection and then uploads a shell. This allows unauthorized access to the system. Recommendations: For Online...