Lucene search
+L

4706 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/17 12:00 a.m.•1 views

CVE-2022-43162: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/viewtest.php...

7.2CVSS5.8AI score0.00762EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/11/17 12:00 a.m.•15 views

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. v1.0 of Online Diagnostic Lab Management System has a security vulnerability that originates from a SQL injection via the /clients/viewclient.php in the id parameter in /clients/viewclient.php contains SQL...

7.2CVSS8.1AI score0.00762EPSS
SaveExploits1References2
NVD
NVD
•added 2022/11/16 8:15 p.m.•26 views

CVE-2022-43135

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...

9.8CVSS0.00789EPSS
SaveExploits1References1
OSV
OSV
•added 2022/11/16 8:15 p.m.•13 views

CVE-2022-43135

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...

9.8CVSS5.8AI score0.00789EPSS
SaveExploits1References1
Prion
Prion
•added 2022/11/16 8:15 p.m.•30 views

Sql injection

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...

7.5CVSS9.7AI score0.00789EPSS
SaveExploits1References1Affected Software1
Hacker One
Hacker One
•added 2022/11/16 3:30 a.m.•24 views

GitHub Security Lab: [python] TarSlip vulnerability improvements

Vulnerability description not provided...

7.1AI score
SaveExploits0
CVE
CVE
•added 2022/11/16 12:00 a.m.•68 views

CVE-2022-43135

The CVE-2022-43135 entry concerns Online Diagnostic Lab Management System v1.0 with a SQL injection flaw in the login flow. Affected component: /diagnostic/login.php, where the username parameter is injectable. Root cause: unsafeguarded handling of user input enabling arbitrary SQL execution. Imp...

9.8CVSS8.2AI score0.00789EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/16 12:00 a.m.•8 views

CVE-2022-43135

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...

8.3AI score0.00789EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/11/16 12:00 a.m.•44 views

CVE-2022-43135

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...

10AI score0.00789EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/11/16 12:00 a.m.•19 views

PT-2022-26768 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the "/diagnostic/login.php" API endpoint. Recommendation...

9.8CVSS9.4AI score0.00789EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/11/16 12:00 a.m.•15 views

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A security vulnerability exists in Online Diagnostic Lab Management System v1.0, which stems from the manipulation of the username parameter in its /diagnostic/login.php component that allows an attacker to...

9.8CVSS8.3AI score0.00789EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/16 12:00 a.m.•5 views

CVE-2022-43135: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...

9.8CVSS5.8AI score0.00789EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2022/11/10 12:00 a.m.•17 views

The vulnerability of the web application’s Online Diagnostic Lab Management System lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the Web application, the Online Diagnostic Lab Management System, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the...

9CVSS7.5AI score0.00762EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2022/11/09 9:15 p.m.•18 views

CVE-2022-43058

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=deleteactivity...

9.8CVSS0.00681EPSS
SaveExploits0References1
OSV
OSV
•added 2022/11/09 9:15 p.m.•11 views

CVE-2022-43058

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=deleteactivity...

9.8CVSS5.8AI score0.00681EPSS
SaveExploits0References1
Prion
Prion
•added 2022/11/09 9:15 p.m.•21 views

Sql injection

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=deleteactivity...

7.5CVSS9.7AI score0.00681EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•3 views

CVE-2022-43058: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=deleteactivity...

9.8CVSS5.8AI score0.00681EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/11/09 12:00 a.m.•10 views

CVE-2022-43058

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=deleteactivity...

8.5AI score0.00681EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/11/09 12:00 a.m.•14 views

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A security vulnerability exists in Online Diagnostic Lab Management System v1.0, which was discovered to contain an SQL injection vulnerability via the id parameter on /odlms//classes/Master.php?f=deleteactivit...

9.8CVSS8.6AI score0.00681EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/09 12:00 a.m.•17 views

PT-2022-26733 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/odlms//classes/Master.php?f=delete activity" API endpoin...

9.8CVSS9.4AI score0.00681EPSS
SaveExploits0References3
Rows per page
Query Builder