605 matches found
Sql injection
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/viewprison.php:4...
Sql injection
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/viewaction.php:4...
Sql injection
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/managevisit.php:4...
Sql injection
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/viewcell.php:4...
Sql injection
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/viewvisit.php:4...
Sql injection
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/manageprison.php:4...
Sql injection
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/manageaction.php:4...
CVE-2022-32405
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/viewprison.php:4...
CVE-2022-32405
CVE-2022-32405 affects Prison Management System v1.0. The vulnerability is a SQL injection in the parameter id of /pms/admin/prisons/view_prison.php:4, caused by lack of SQL data filtering/escaping. Consequences described in connected sources include the potential to access or exfiltrate sensitiv...
CVE-2022-32404
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manageinmate.php:3...
CVE-2022-32404
CVE-2022-32404 affects Prison Management System v1.0, with a SQL injection in the id parameter of /pms/admin/inmates/manage_inmate.php. The root cause is unsafely handled user input in the id field, enabling arbitrary SQL execution and potential data disclosure or modification. The vulnerability ...
CVE-2022-32403
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/managerecord.php:4...
CVE-2022-32403
CVE-2022-32403 affects Prison Management System v1.0. The vulnerability is a SQL injection in the /pms/admin/inmates/manage_record.php endpoint, triggered by the id parameter due to unsafely assembled SQL queries. The issue enables access to or manipulation of database data and is described with ...
CVE-2022-32402
CVE-2022-32402 concerns a SQL injection in the Prison Management System v1.0. The vulnerability is triggered through the id parameter in /pms/admin/prisons/manage_prison.php, allowing potentially unauthorized data access. Public sources consistently describe the issue as a SQL injection originati...
CVE-2022-32402
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/manageprison.php:4...
CVE-2022-32401
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manageprivilege.php:4...
CVE-2022-32401
Affected software: Prison Management System v1.0. Vulnerability type: SQL injection in the /pms/admin/inmates/manage_privilege.php endpoint via the id parameter. Root cause: lack of proper input filtering/escaping leading to injection. Impact (as stated): not explicitly quantified in the connecte...
CVE-2022-32400
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/user/manageuser.php:4...
CVE-2022-32400
The CVE-2022-32400 issue affects Prison Management System v1.0, where SQL injection is possible via the id parameter in /pms/admin/user/manage_user.php. The root cause, as described in multiple sources, is a lack of input filtering/escaping, allowing an attacker to inject SQL commands to access o...