EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. A SQL injection vulnerability exists in EsafeNet CDG version 5, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

CVE-2024-9322

A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/editmanufacturer.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2024-42785

A SQL injection vulnerability in /music/index.php?page=viewplaylist in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter...

Establishment Billing Management System SQL注入漏洞

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

PT-2024-38229 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue affects the processing of the file /admin/view reserved.php, where the manipulation of the id argument leads to sql injection. The attack can be...

Online-Payroll-Management-System SQL注入漏洞

Online-Payroll-Management-System is an online payroll management system by the individual developer MD MAFUJUL HASAN. A SQL injection vulnerability exists in Online-Payroll-Management-System version 20230911 and prior versions, which stems from an incorrect manipulation of the parameter id that c...

PT-2024-29443 · Unknown · Campcodes Supplier Management System

Name of the Vulnerable Software and Affected Versions: CampCodes Supplier Management System version 1.0 Description: The issue concerns SQL injection. It can be exploited via the "Supply Management System/admin/view order items.php?id=" endpoint, specifically through the id variable...

CVE-2024-5457

The Panda Video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

itsourcecode Document Management System SQL Injection Vulnerability

Document Management System is an open source document management system from Itsourcecode. A SQL injection vulnerability exists in itsourcecode Document Management System version 1.0, which originates from edithis.php containing an unknown function that causes SQL injection via the parameter id...

Payroll Management System SQL Injection Vulnerability

Payroll Management System is a payroll management system by Carlo Montero Personal Developer. Itsourcecode Payroll Management System version 1.0 suffers from a SQL injection vulnerability that originates from the inclusion of an unknown function in payrollitems.php, which leads to SQL injection v...

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

Best Courier Management System 代码问题漏洞

Best Courier Management System is a courier management system by Mayuri K., a personal developer. A code issue exists in version 1.0 of the Best Courier Management System where an incorrect manipulation of the parameter id can result in unrestricted uploads...

Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. A SQL injection vulnerability exists in Online Examination System version 1.0, which originates from exam.php containing unknown code that causes SQL injection via the parameter id...

VulnCheck KEV: CVE-2019-9762

A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...

Online Chatting System 1.0 SQL注入漏洞

Online Chatting System is an online chatting system. A SQL injection vulnerability exists in Online Chatting System version 1.0, which originates from the parameter id of the file admin/updateroom.php that lacks validation of externally entered SQL statements. An attacker can exploit this...

Dreamer CMS Cross-Site Request Forgery Vulnerability (CNVD-2024-13543)

Dreamer CMS is a dreamer content management system. A cross-site request forgery vulnerability exists in Dreamer CMS version 4.1.3, which stems from the fact that incorrect manipulation of the parameter id can lead to cross-site request forgery. No details of the vulnerability are provided at thi...

SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A SQL injection vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter pid that can...

Kashipara Food Management System SQL Injection Vulnerability (CNVD-2024-13469)

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which stems from a lack of validation of externally entered SQL statements in the parameter id of the itemlistedit.php file,...

CVE-2023-5927

A vulnerability has been found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/courses/managecourse.php. The manipulation of the argument id leads to sql injection. The exploit has been...

Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0, which ste...