CVE-2018-25191 Facturation System 1.0 SQL Injection via editar_producto.php

Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'modid' parameter. Attackers can send POST requests to the editarproducto.php endpoint with crafted SQL payloads in the modid...

Facturation System SQL注入漏洞

Facturation System is an invoice management system personally developed by Obed Alvarado. Version 1.0 of Facturation System has a SQL injection vulnerability. This vulnerability stems from the modid parameter in the editarproducto.php file, which exposes a SQL injection vulnerability. This could...

PT-2026-23701

Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'mod id' parameter. Attackers can send POST requests to the editar producto.php endpoint with crafted SQL payloads in the mod...

PT-2018-9700

Name of the Vulnerable Software and Affected Versions: PbootCMS version 0.9.8 Description: The issue allows for CSRF via an "admin.php/Message/mod/id/19.html?backurl=/index.php" request. This results in PHP code injection in the recontent parameter. Recommendations: For PbootCMS version 0.9.8, as...