CVE-2021-43657

CVE-2021-43657 is a stored XSS vulnerability in Sourcecodetester Simple Client Management System (SCMS) v1.0, exploitable via MAster.php input fields. The issue allows an attacker to inject arbitrary script/HTML on victims’ browsers. Affected component: MAster.php in SCMS 1.0; root cause: stored ...

Sql injection

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...

Helmet Store Showroom Site SQL Injection Vulnerability

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from its /hss/classes/Master.php?f=deleteproduct...

CVE-2022-46127: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...

CVE-2022-46127

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...

CVE-2022-44277: Improper Neutralization of Special Elements used in an SQL Command

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=deleteproduct...

CVE-2022-44280: Improper Limitation of a Pathname to a Restricted Directory

Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...

Sql injection

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteservice...

CVE-2022-44378: Improper Neutralization of Special Elements used in an SQL Command

Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=deletemechanic...

CVE-2022-44379: Improper Neutralization of Special Elements used in an SQL Command

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteservice...

CVE-2022-44379

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteservice...

CVE-2022-44378

Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=deletemechanic...

CVE-2022-44402: Improper Neutralization of Special Elements used in an SQL Command

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deletetransaction...

CVE-2022-43058: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=deleteactivity...

CVE-2022-43351

Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

CVE-2022-43351

Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

CVE-2022-43352

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=deletequote...

CVE-2022-43351: Undefined Security Weakness

Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

CVE-2022-43350: Improper Neutralization of Special Elements used in an SQL Command

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=deleteinquiry...

CVE-2022-43352: Improper Neutralization of Special Elements used in an SQL Command

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=deletequote...