CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php...

CVE-2022-32094

Hospital Management System v1.0 is vulnerable to SQL injection in server-side scripts. Public notes show two confirmed vectors: an unsanitized input parameter in /HMS/doctor.php (editid) and a login flow parameter in /doctorlogin.php (loginid). Root cause across sources is improper input handling...

CVE-2022-32093

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php...

CVE-2022-32094: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php...

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. hospital Management System v1.0 is vulnerable to an SQ injection vulnerability that originates in the doctorlogin.php page. A SQL...

CVE-2022-32093: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php...

eservice.gov.bd XSS vulnerability

Open Bug Bounty ID: OBB-442714 Description| Value ---|--- Affected Website:| eservice.gov.bd Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

泛微 E-mobile 登录处 loginid 参数注入漏洞

No description provided by source...

SQL Injection Vulnerability in Decentralized Management (e-cology) System of Shanghai Panmicro Network Technology Co.

Panmicro collaborative management application platform e-cology is a set of collaborative business platform. An SQL injection vulnerability exists in the e-cology system, which can be exploited by an attacker to obtain database information due to the lack of filtering of the loginid parameter...

SQL Injection Vulnerability in e-mobile Loginid Parameter of Panmicro Mobile OA Solution

e-mobile is a mobile office product crafted by Panavision for mobile terminal users such as cell phones and tablet PCs. A SQL injection vulnerability exists in the e-mobile loginid parameter of the Panavision mobile OA solution. Comprehensive exploitation of the vulnerability allows attackers to...

SynConnect 2.0 the presence of SQL injection vulnerabilities-vulnerability warning-the black bar safety net

SynConnect in the loginid parameter in the presence ofSQL injectionvulnerability that stems from the program using SQL before the query is not adequately verify user-supplied input. An attacker exploit the vulnerability to manipulate the application, access or modify data, or the use of the...

SynConnect Pms - index.php?loginid SQL Injection

SynConnect Pms - index.php?loginid SQL Injection Title: ==== SynConnect - SQL Injection vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== Date: ==== 01-03-2013 CRD: ==== CRD-2013-01 Vendor: ======...

CVE-2013-2690

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action...

Sql injection

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action...

CVE-2013-2690

CVE-2013-2690 is a SQL injection vulnerability in the SynConnect 2.0 login flow of Synchroweb Technology. The flaw affects index.php where an attacker can manipulate the loginid parameter in a logoff action to execute arbitrary SQL commands. Reported in NVD with a base score of 7.5 (HIGH) and net...

CVE-2013-2690: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action...

SynConnect SQL Injection

Title: ==== SynConnect - SQL Injection vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== Date: ==== 01-03-2013 CRD: ==== CRD-2013-01 Vendor: ====== Synchroweb Technology is a provider of application...

CVE-2010-5039

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...

CVE-2010-5039

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...

CVE-2010-5039

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...