628 matches found
CVE-2022-30837: Improper Neutralization of Input During Web Page Generation
Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting XSS via /ttms/classes/Master.php?f=saverecipient, vehiclename...
Room-rent-portal-site 跨站脚本漏洞
Room-rent-portal-site is a room for rent portal by the individual developer Carlo Montero. A security vulnerability exists in Room-rent-portal-site v1.0, which stems from a cross-site scripting issue in /rrps/classes/Master.php?f=savecategory...
CVE-2022-30843: Improper Neutralization of Special Elements used in an SQL Command
Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...
CVE-2022-30461: Improper Neutralization of Special Elements used in an SQL Command
Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=deleteclient, id...
CVE-2022-30464: Improper Neutralization of Input During Web Page Generation
ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...
CVE-2022-30458: Improper Neutralization of Input During Web Page Generation
Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting XSS via /asms/classes/Master.php?f=saveproduct, name...
CVE-2022-30456: Improper Neutralization of Input During Web Page Generation
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting XSS via /bcms/classes/Master.php?f=savecourtrental...
CVE-2022-30838: Improper Neutralization of Special Elements used in an SQL Command
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=updateapplicationstatus...
CVE-2022-30455: Improper Neutralization of Special Elements used in an SQL Command
Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deletecourtrental, id...
CVE-2022-30454: Improper Neutralization of Special Elements used in an SQL Command
Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteproduct...
Badminton Center Management System SQL注入漏洞
Badminton Center Management System is a badminton center management system. It provides an online and automated platform for badminton centers to manage their daily transactions and records. sql injection vulnerability exists in Badminton Center Management 1.0. An attacker can exploit this...
CVE-2022-31487: Improper Neutralization of Special Elements used in an SQL Command
Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chartcontent/master.php symbol SQL injection...
CVE-2022-29304: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...
Merchandise Online Store SQL注入漏洞（CNVD-2022-40280）
Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deletefeatured to conduct SQL injection attack...
Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40278)
Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deletecategory SQL injection attack...
Merchandise Online Store SQL注入漏洞
Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deleteinventory to conduct SQL injection attack...
Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58676）
Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=deletefacility, the id parameter of the po...
CVE-2022-30381
Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggersmerch/classes/Master.php?f=deleteimg...
