PT-2021-24138

Name of the Vulnerable Software and Affected Versions: Online Enrollment Management System version 1.0 Description: The issue allows for SQL injection attacks through the id parameter. An attacker can craft a payload that injects a SQL sub-query, utilizing MySQL's load file function with a UNC fi...

CVE-2021-45253

The id parameter in viewstorage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted...