Sql injection

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...

CVE-2022-28416: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

CVE-2022-28414: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...

CVE-2022-28030: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteestate...

CVE-2022-28028: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...

CVE-2022-28415: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...

CVE-2022-28413: Improper Neutralization of Special Elements used in an SQL Command

Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deleteenrollment...

CVE-2022-28023: Improper Neutralization of Special Elements used in an SQL Command

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

CVE-2022-28029: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...

CVE-2022-28417: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

CVE-2022-28022: Improper Neutralization of Special Elements used in an SQL Command

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...

CVE-2022-28412: Improper Neutralization of Special Elements used in an SQL Command

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...

Simple Chatbot Application SQL Injection Vulnerability (CNVD-2022-70050)

Simple Chatbot Application is a chatbot application. version 1.0 of Simple Chatbot Application is vulnerable to SQL injection, which can be exploited by attackers via the message parameter in master.php...

CVE-2022-1075: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=savecontact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched...

CVE-2021-46427

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-46427

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-46427: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

CVE-2021-42580: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

YUNUCMS v1.0.7 SQL Injection Vulnerabilities in Master.php and V1.php Pages

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS v1.0.7 Master.php and V1.php pages are vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitiv...

alaskavu.fr XSS vulnerability

Open Bug Bounty ID: OBB-574984 Description| Value ---|--- Affected Website:| alaskavu.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...