PT-2022-26236 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the /diagnostic/editcategory.php?id= endpoint. This allows for potential manipulation of database queries by injecti...

Online Diagnostic Lab Management System 代码问题漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. version v1.0 of Online Diagnostic Lab Management System contains a security vulnerability that can be exploited by attackers to execute arbitrary code via crafted PHP files...

PT-2022-26235 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the "/diagnostic/editclient.php?id=" API endpoint. This allows for potential manipulation of database queries by...

CVE-2022-42073

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...

CVE-2022-42074

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=...

CVE-2022-41512

Summary (based on connected documents): The CVE-2022-41512 vulnerability affects Online Diagnostic Lab Management System v1.0, specifically via the /php_action/editFile.php (also referenced as /php action/editFile.php in some sources) arbitrary file upload component. The underlying issue is an ar...

CVE-2022-42074

CVE-2022-42074 affects Online Diagnostic Lab Management System v1.0, with a SQL Injection flaw in the /diagnostic/editcategory.php?id= endpoint. The root cause is unsanitized input in the id parameter, enabling arbitrary SQL execution. CVSS v3.1 score is 7.2 (HIGH) with Network attack vector, Low...

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from the /diagnostic/editclient.php The id parameter in /diagnostic/editclient.php is vulnerable to SQL...

PT-2022-25900 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /php action/editFile.php component...

CVE-2022-42074: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=...

CVE-2022-41513

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php...

CVE-2022-41513: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php...

CVE-2022-42073

Vulnerability (CVE-2022-42073) : Online Diagnostic Lab Management System v1.0 is vulnerable to an SQL Injection via the /diagnostic/editclient.php?id= parameter. The issue is repeatedly described across multiple connected sources (CNVD/CNNVD, NVD, Red Hat, CVE listing, etc.), with the root cause ...

CVE-2022-41512: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Erlik 2 - Vulnerable-Flask-App

Erlik 2 - Vulnerable-Flask-App Tested - Kali 2022.1 Description It is a vulnerable Flask Web App. It is a lab environment created for people who want to improve themselves in the field of web penetration testing. Features It contains the following vulnerabilities. HTML Injection XSS SSTI SQL...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/seamonkey-2.53.14-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

Security Vulnerabilities in Covert CIA Websites

Back in 2018, we learned that covert system of websites that the CIA used for communications was compromised by--at least--China and Iran, and that the blunder caused a bunch of arrests, imprisonments, and executions. Were now learning that the CIA is still "using an irresponsibly secured system...

Error: "Virtual lab supports maximum of 9 networks."

Challenge When configuring a SureBackup Virtual Lab for a VMware vSphere environment, attempting to add more than 9 Isolated Networks or configure more than 9 Isolated vNIC adapters will cause the following error to be shown: Virtual lab supports maximum of 9 networks. Cause The Virtual Lab...

GitHub Security Lab: [CPP]: Add query for CWE-297: Improper Validation of Certificate with Host Mismatch

This bug was reported directly to GitHub Security Lab...

GHSA-237R-MX84-7X8C VNCAuthProxy authentication bypass vulnerability

OSU Open Source Lab VNCAuthProxy through 1.1.1 is affected by an vncap/vnc/protocol.py VNCServerAuthenticator authentication-bypass vulnerability that could allow a malicious actor to gain unauthorized access to a VNC session or to disconnect a legitimate user from a VNC session. A remote attacke...