3 matches found
PT-2022-21031
Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/bcms/admin/courts/manage court.php" API endpoint, specifically through the id variable. This allows for potential...
PT-2013-2042
Name of the Vulnerable Software and Affected Versions MYRE Business Directory affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the cat parameter in links.php. This could potentially lead to unauthorized access or manipulation of...
PT-2012-2986
Name of the Vulnerable Software and Affected Versions phux Download Manager affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the file parameter in the "download.php" script. This can lead to unauthorized access and manipulation of...