725 matches found
CVE-2022-42241: Improper Neutralization of Special Elements used in an SQL Command
Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=deletemessage...
Online Pet Shop We App Master.php?f=delete_sub_category SQL Injection Vulnerability
Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pet Shop We App version 1.0, which originates from a lack of validation of externally entered SQL statements in the...
Online Leave Management System Master.php?f=delete_designation SQL Injection Vulnerability
Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete designation lacks validation of external input SQL statements. An attacker could use this...
CVE-2022-40926
Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...
CVE-2022-40927
Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...
CVE-2022-40927
Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...
Online Leave Management System SQL Injection Vulnerability
Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete designation lacks validation of external input SQL statements. An attacker could use this...
CVE-2022-40928: Improper Neutralization of Special Elements used in an SQL Command
Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...
CVE-2022-40926: Improper Neutralization of Special Elements used in an SQL Command
Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...
CVE-2022-40927: Improper Neutralization of Special Elements used in an SQL Command
Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...
Sql injection
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
CVE-2022-40935
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
CVE-2022-40933
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
CVE-2022-40933
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
CVE-2022-40934: Improper Neutralization of Special Elements used in an SQL Command
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
PT-2022-25631
Name of the Vulnerable Software and Affected Versions Online Pet Shop We App version 1.0 Description The issue concerns a SQL injection vulnerability. It can be exploited via the /pet shop/classes/Master.php endpoint, specifically through the f and id parameters. There is no information provided...
CVE-2022-40935: Improper Neutralization of Special Elements used in an SQL Command
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
PT-2022-25633
Name of the Vulnerable Software and Affected Versions Online Pet Shop We App version 1.0 Description The issue is related to SQL Injection via the "/pet shop/classes/Master.php?f=delete category,id" endpoint. This allows for potential exploitation. Recommendations For Online Pet Shop We App versi...
CVE-2022-40933: Improper Neutralization of Special Elements used in an SQL Command
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
Ingredients Stock Management System Arbitrary File Deletion Vulnerability
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of Ingredients Stock Management System is vulnerable to an arbitrary file deletion vulnerability in component /classes/ Master.php?f=deleteimg lacks validation for the delete...