CVE-2022-46125: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient&id=...

CVE-2022-29748: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manageclient&id=...

CVE-2022-26284

CVE-2022-26284 affects Simple Client Management System v1.0. The vulnerability is a SQL injection in the manage_client endpoint, exploitable via the id parameter, which can allow an attacker to dump the application’s database through crafted HTTP requests. Public references describe the issue and...

CVE-2022-26284: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manageclient endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...