Sql injection

A vulnerability has been found in SourceCodester Gas Agency Management System and classified as critical. This vulnerability affects unknown code of the file gasmark/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2022-2802: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Gas Agency Management System and classified as critical. This vulnerability affects unknown code of the file gasmark/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2022-2727

A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument adminemail/adminpass leads to sql injection. The attack can be...

Sql injection

A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument adminemail/adminpass leads to sql injection. The attack can be...

CVE-2022-2727: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument adminemail/adminpass leads to sql injection. The attack can be...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input email protected' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...

CVE-2022-2708 SourceCodester Gym Management System login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input [email protected]' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...

PT-2022-18208 · Sourcecodester · Sourcecodester Gym Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gym Management System affected versions not specified Description: A critical issue was found in the SourceCodester Gym Management System, affecting an unknown part of the file login.php. The manipulation of the user login...

CVE-2022-2708: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input [email protected]' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR SELECT 7064 FROMSELECT COUNT,CONCAT0x71627a7671,SELECT...

CVE-2022-2680 SourceCodester Church Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR SELECT 7064 FROMSELECT COUNT,CONCAT0x71627a7671,SELECT...

CVE-2022-2673 Rigatur Online Booking and Hotel Management System POST Request login.php sql injection

A vulnerability was found in Rigatur Online Booking and Hotel Management System aff6409. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Request Handler. The manipulation of the argument email/pass leads to s...

CVE-2022-2673 Rigatur Online Booking and Hotel Management System POST Request login.php sql injection

A vulnerability was found in Rigatur Online Booking and Hotel Management System aff6409. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Request Handler. The manipulation of the argument email/pass leads to s...

PT-2022-18034 · Unknown · Rigatur Online Booking/Hotel Management System

Name of the Vulnerable Software and Affected Versions: Rigatur Online Booking and Hotel Management System version aff6409 Description: A critical issue was found in the file login.php of the component POST Request Handler, where the manipulation of the email/pass argument leads to sql injection...

CVE-2022-2680: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR SELECT 7064 FROMSELECT COUNT,CONCAT0x71627a7671,SELECT...

CVE-2022-2683: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password with the input " leads to cross site scripting. It is possible to initiate the...

CVE-2022-2673: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Rigatur Online Booking and Hotel Management System aff6409. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Request Handler. The manipulation of the argument email/pass leads to s...

Pharmacy Management System login.php SQL Injection Vulnerability

Pharmacy Management System MPMS is a multilingual pharmacy management system from the personal developer Mayuri K. A SQL injection vulnerability exists in Pharmacy Management System v1.0, which stems from the electronic email and password in login.php Lack of validation of externally entered SQL...

CVE-2022-34949

Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at login.php...

CVE-2022-34949

CVE-2022-34949 affects Pharmacy Management System v1.0. Multiple SQL injection vulnerabilities exist in login.php via the email and password parameters, caused by lack of validation of externally entered SQL statements. Impact stated across sources includes potential theft of sensitive data. No e...