188 matches found
itsourcecode Document Management System SQL Injection Vulnerability
Document Management System is an open source document management system from Itsourcecode. A SQL injection vulnerability exists in itsourcecode Document Management System version 1.0, which originates from edithis.php containing an unknown function that causes SQL injection via the parameter id...
Payroll Management System SQL Injection Vulnerability
Payroll Management System is a payroll management system by Carlo Montero Personal Developer. Itsourcecode Payroll Management System version 1.0 suffers from a SQL injection vulnerability that originates from the inclusion of an unknown function in payrollitems.php, which leads to SQL injection v...
Dino Physics School Assistant Security Breach
Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...
Best Courier Management System 代码问题漏洞
Best Courier Management System is a courier management system by Mayuri K., a personal developer. A code issue exists in version 1.0 of the Best Courier Management System where an incorrect manipulation of the parameter id can result in unrestricted uploads...
Online Examination System SQL Injection Vulnerability
Projectworlds Online Examination System is an online examination system from Projectworlds India. A SQL injection vulnerability exists in Online Examination System version 1.0, which originates from exam.php containing unknown code that causes SQL injection via the parameter id...
VulnCheck KEV: CVE-2019-9762
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...
Online Chatting System 1.0 SQL注入漏洞
Online Chatting System is an online chatting system. A SQL injection vulnerability exists in Online Chatting System version 1.0, which originates from the parameter id of the file admin/updateroom.php that lacks validation of externally entered SQL statements. An attacker can exploit this...
Dreamer CMS Cross-Site Request Forgery Vulnerability (CNVD-2024-13543)
Dreamer CMS is a dreamer content management system. A cross-site request forgery vulnerability exists in Dreamer CMS version 4.1.3, which stems from the fact that incorrect manipulation of the parameter id can lead to cross-site request forgery. No details of the vulnerability are provided at thi...
SourceCodester Employee Management System SQL Injection Vulnerability
SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A SQL injection vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter pid that can...
Kashipara Food Management System SQL Injection Vulnerability (CNVD-2024-13469)
Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which stems from a lack of validation of externally entered SQL statements in the parameter id of the itemlistedit.php file,...
CVE-2023-5927
A vulnerability has been found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/courses/managecourse.php. The manipulation of the argument id leads to sql injection. The exploit has been...
Simple Student Information System SQL Injection Vulnerability
Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0, which ste...
Task Reminder System SQL Injection Vulnerability
Task Reminder System is a Task Reminder System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Task Reminder System version 1.0, which stems from the parameter id of the file classes/Users.php?f=delete that can lead to SQL injection...
Sql injection
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editbranch.php...
OpenRapid RapidCMS SQL Injection Vulnerability
OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...
CVE-2023-40931
A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/bannermessage-ajaxhelper.php...
Online Graduate Tracer System SQL注入漏洞
Online Graduate Tracer System is an online graduate tracer system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Graduate Tracer System version 1.0, which stems from a parameter id in the file sexit.php that can lead to sql injection...
D-Link DAR-8000 操作系统命令注入漏洞
D-Link DAR-8000 is the Internet Behavior Audit Gateway from China AUO D-Link. The D-Link DAR-8000-10 version suffers from an operating system command injection vulnerability, which originates from the parameter id of the file /app/sys1.php failing to correctly filter construct command special...
SEMCMS SQL注入漏洞
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS version 1.5 suffers from a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in the parameter id of /AntSuxin.php, which can be exploited b...