196 matches found
Task Reminder System SQL Injection Vulnerability
Task Reminder System is a Task Reminder System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Task Reminder System version 1.0, which stems from the parameter id of the file classes/Users.php?f=delete that can lead to SQL injection...
Sql injection
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editbranch.php...
OpenRapid RapidCMS SQL Injection Vulnerability
OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...
CVE-2023-40931
A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/bannermessage-ajaxhelper.php...
Online Graduate Tracer System SQL注入漏洞
Online Graduate Tracer System is an online graduate tracer system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Graduate Tracer System version 1.0, which stems from a parameter id in the file sexit.php that can lead to sql injection...
D-Link DAR-8000 操作系统命令注入漏洞
D-Link DAR-8000 is the Internet Behavior Audit Gateway from China AUO D-Link. The D-Link DAR-8000-10 version suffers from an operating system command injection vulnerability, which originates from the parameter id of the file /app/sys1.php failing to correctly filter construct command special...
SEMCMS SQL注入漏洞
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS version 1.5 suffers from a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in the parameter id of /AntSuxin.php, which can be exploited b...
CVE-2023-37600
Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /api?path=profile...
AC Repair and Services System SQL注入漏洞
AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Individual Developer. SourceCodester AC Repair and Services System 1.0 suffers from a SQL injection vulnerability that stems from the parameter id of the file Master.php?f=deletebook which can lead to...
CVE-2023-3100
A vulnerability, which was classified as critical, has been found in IBOS 4.5.5. Affected by this issue is the function actionDel of the file ?r=dashboard/approval/del. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used...
Sourcecodester Budget And Expense Tracker System SQL注入漏洞
Budget And Expense Tracker System is a web based application. It is used to manage your personal/small business budget and expenses. Budget and Expense Tracker System v1.0 suffers from a SQL injection vulnerability that originates from a lack of validation of the parameter id of...
PT-2023-19149 · Unknown · Sourcecodester Online Dj Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online DJ Management System. The issue affects an unknown functionality of the file admin/inquiries/view details.php,...
Expense Tracker SQL注入漏洞
Expense Tracker is an expense tracker organized by SourceCode and Projects. Earnings and Expense Tracker App version 1.0 suffers from a SQL injection vulnerability that originates from a sql injection via parameter id...
Air Cargo Management System SQL注入漏洞
Air Cargo Management System is an air cargo management system. A security vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which is caused by an incorrect manipulation of the parameter id resulting in sql injection...
Automatic Question Paper Generator System SQL注入漏洞
Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which is caused by unknown code in admin/courses/viewclass.p...
SourceCodester Friendly Island Pizza Website and Ordering System SQL注入漏洞
SourceCodester Friendly Island Pizza Website and Ordering System is the Island Pizza website and ordering system. A SQL injection vulnerability exists in SourceCodester Friendly Island Pizza Website and Ordering System version 1.0 due to an unknown function in the file deleteorder.php in the...
Auto Dealer Management System SQL注入漏洞
Auto Dealer Management System is an automobile dealer management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Auto Dealer Management System version 1.0, which is caused by an incorrect manipulation of the parameter id that results in an sql injection...
CVE
CMS source code url: https://www.sourcecodester.com/php/16166/on...
Canteen Management System SQL注入漏洞
Canteen Management System is a canteen management system. version 1.0 of Canteen Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements by parameter id. An attacker could use this vulnerability to execute illegal SQL commands to...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql...