4706 matches found
PT-2022-23577 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Section parameter at the "/staff/lab.php" API endpoint. Recommendations: For Library...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.0, which was discovered to contain an SQL injection vulnerability via the...
CVE-2022-37150
An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...
CVE-2022-37151
There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...
CVE-2022-37150
An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...
CVE-2022-37152
An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...
CVE-2022-37152
An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...
CVE-2022-37150
An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...
CVE-2022-37152
An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...
CVE-2022-37151
There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...
CVE-2022-37151
There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...
Cross site scripting
An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...
Sql injection
An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...
Design/Logic Flaw
There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...
CVE-2022-37151
There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...
CVE-2022-37151
Technical details about CVE-2022-37151 are not provided in the connected documents. Monitor for updates from vendor advisories and security bulletins to obtain affected components, impact, and remediation.
CVE-2022-37152
CVE-2022-37152 affects Online Diagnostic Lab Management System 1.0. The issue is a SQL injection via the dob parameter in /classes/Users.php?f=save_client, with CVSS 3.1 base score 9.8 (CRITICAL) affecting confidentiality, integrity, and availability. The provided documents do not specify root-ca...
CVE-2022-37152
An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...
CVE-2022-37150
An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...
CVE-2022-37150
An XSS vulnerability (stored) affects Online Diagnostic Lab Management System 1.0 (CVE-2022-37150). The issue is triggered via user-input fields including firstname, address, middlename, lastname, gender, email, and contact, indicating improper sanitization of inputs stored and later reflected. T...