CVE-2022-46124: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manageuser&id=...

CVE-2022-43179: Improper Neutralization of Special Elements used in an SQL Command

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manageuser&id=...

CVE-2022-44403: Improper Neutralization of Special Elements used in an SQL Command

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manageuser&id=...

CVE-2022-3549: Incorrect Privilege Assignment

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /csms/admin/?page=user/manageuser of the component Avatar Handler. The manipulation leads to unrestricted upload. The...

CVE-2022-42230: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manageuser&id=...

CVE-2022-36690: Improper Neutralization of Special Elements used in an SQL Command

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser&id=...

CVE-2022-36679: Improper Neutralization of Special Elements used in an SQL Command

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser...

CVE-2022-31941

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user\manageuser&id=...

CVE-2022-31941: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user\manageuser&id=...

CVE-2022-32354: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manageuser&id=...

CVE-2022-31969

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=user/manageuser&id=...

CVE-2022-31989: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manageuser&id=...

CVE-2022-31975: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser&id=...

CVE-2022-30417: Improper Neutralization of Special Elements used in an SQL Command

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manageuser&id=...

CVE-2022-30379: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...

CVE-2022-29980: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manageuser&id=...

CVE-2022-29987: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manageuser&id=...

CVE-2022-29739: Improper Neutralization of Special Elements used in an SQL Command

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manageuser&id=...

CVE-2022-25115

A remote code execution RCE vulnerability in the Avatar parameter under /admin/?page=user/manageuser of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2022-24582: Improper Neutralization of Input During Web Page Generation

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manageuser from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network...