PT-2022-7050 · WordPress · Paid Memberships Pro

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro WordPress Plugin versions prior to 2.9.8 Description: The issue is related to an unauthenticated SQL injection vulnerability. This vulnerability is located in the code parameter of the "/pmpro/v1/order" REST route. It may...

PT-2022-26794 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: A SQL injection issue was found in the Billing System Project. The vulnerability can be exploited via the id parameter at the "editorder.php" endpoint. Recommendations: For Billing System Projec...

CVE-2022-30385

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteorder...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers to conduct SQL injection attacks via /vloggersmerch/classes/Master.php?f=payorder...

client.moscowstud.com XSS vulnerability

Vulnerable URL: https://client.moscowstud.com/order/workjson?jsoncallback=prompt/OPENBUGBOUNTY/...