Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/managecrime.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manageinmate.php:3...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/viewprison.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/managevisit.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/viewcrime.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/viewvisit.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/viewcell.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/viewaction.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manageprivilege.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/manageprison.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/viewinmate.php:3...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/user/manageuser.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/managerecord.php:4...

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/managecell.php:4...

CVE-2022-32405

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/viewprison.php:4...

CVE-2022-32405

CVE-2022-32405 affects Prison Management System v1.0. The vulnerability is a SQL injection in the parameter id of /pms/admin/prisons/view_prison.php:4, caused by lack of SQL data filtering/escaping. Consequences described in connected sources include the potential to access or exfiltrate sensitiv...

CVE-2022-32404

CVE-2022-32404 affects Prison Management System v1.0, with a SQL injection in the id parameter of /pms/admin/inmates/manage_inmate.php. The root cause is unsafely handled user input in the id field, enabling arbitrary SQL execution and potential data disclosure or modification. The vulnerability ...

CVE-2022-32404

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manageinmate.php:3...

CVE-2022-32403

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/managerecord.php:4...

CVE-2022-32403

CVE-2022-32403 affects Prison Management System v1.0. The vulnerability is a SQL injection in the /pms/admin/inmates/manage_record.php endpoint, triggered by the id parameter due to unsafely assembled SQL queries. The issue enables access to or manipulation of database data and is described with ...