CVE-2022-32402

CVE-2022-32402 concerns a SQL injection in the Prison Management System v1.0. The vulnerability is triggered through the id parameter in /pms/admin/prisons/manage_prison.php, allowing potentially unauthorized data access. Public sources consistently describe the issue as a SQL injection originati...

CVE-2022-32402

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/manageprison.php:4...

CVE-2022-32401

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manageprivilege.php:4...

CVE-2022-32401

Affected software: Prison Management System v1.0. Vulnerability type: SQL injection in the /pms/admin/inmates/manage_privilege.php endpoint via the id parameter. Root cause: lack of proper input filtering/escaping leading to injection. Impact (as stated): not explicitly quantified in the connecte...

CVE-2022-32400

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/user/manageuser.php:4...

CVE-2022-32400

The CVE-2022-32400 issue affects Prison Management System v1.0, where SQL injection is possible via the id parameter in /pms/admin/user/manage_user.php. The root cause, as described in multiple sources, is a lack of input filtering/escaping, allowing an attacker to inject SQL commands to access o...

CVE-2022-32399

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/viewcrime.php:4...

CVE-2022-32399

CVE-2022-32399 : The Prison Management System v1.0 is affected by a SQL injection in the /pms/admin/crimes/view_crime.php:4 endpoint, via the vulnerable id parameter. The root cause is unsanitized input in the id field, allowing an attacker to craft SQL payloads. The CVSS information shows a high...

CVE-2022-32398

CVE-2022-32398 affects Prison Management System v1.0. The vulnerability is a SQL injection via the id parameter in /pms/admin/cells/manage_cell.php:4, caused by inadequate input filtering. Consequences, as described across connected sources, include exposure of sensitive data due to arbitrary SQL...

CVE-2022-32398

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/managecell.php:4...

CVE-2022-32397

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/viewvisit.php:4...

CVE-2022-32397

CVE-2022-32397 affects Prison Management System v1.0. A SQL injection vulnerability exists in the parameter 'id' exposed by /pms/admin/visits/view_visit.php (line 4). The issue allows arbitrary SQL commands via unfiltered input, potentially exposing sensitive data. Public references in connected ...

CVE-2022-32396

CVE-2022-32396 affects Prison Management System v1.0, with a SQL injection in /pms/admin/visits/manage_visit.php:4 via the id parameter. Root cause: lack of input filtering/escaping enabling arbitrary SQL execution. Documented impact includes data exposure (partial/confidentiality/integity/availa...

CVE-2022-32396

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/managevisit.php:4...

CVE-2022-32395

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/managecrime.php:4...

CVE-2022-32395

CVE-2022-32395 affects Prison Management System v1.0. The vulnerability is a SQL injection in the application layer, exploitable via the id parameter in /pms/admin/crimes/manage_crime.php, caused by lack of input filtering/escaping for the id value (CNVD-2022-48391 reference corroborates this). C...

CVE-2022-32394

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/viewinmate.php:3...

CVE-2022-32394

CVE-2022-32394 affects Prison Management System v1.0. A SQL injection vulnerability exists in the /pms/admin/inmates/view_inmate.php:3 endpoint via the id parameter, caused by insufficient input filtering. This is documented across multiple sources (NVD, Red Hat, CNVD, CNVD variants) and explicit...

CVE-2022-32393

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/viewcell.php:4...

CVE-2022-32393

Prison Management System v1.0 contains a SQL injection vulnerability via the id parameter in /pms/admin/cells/view_cell.php:4. The issue arises from insufficient input handling/filter escaping, enabling attackers to inject SQL commands to access or modify data. No exploitation details, affected v...