CVE-2022-32399

CVE-2022-32399 : The Prison Management System v1.0 is affected by a SQL injection in the /pms/admin/crimes/view_crime.php:4 endpoint, via the vulnerable id parameter. The root cause is unsanitized input in the id field, allowing an attacker to craft SQL payloads. The CVSS information shows a high...

CVE-2022-32398

CVE-2022-32398 affects Prison Management System v1.0. The vulnerability is a SQL injection via the id parameter in /pms/admin/cells/manage_cell.php:4, caused by inadequate input filtering. Consequences, as described across connected sources, include exposure of sensitive data due to arbitrary SQL...

CVE-2022-32398

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/managecell.php:4...

CVE-2022-32397

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/viewvisit.php:4...

CVE-2022-32397

CVE-2022-32397 affects Prison Management System v1.0. A SQL injection vulnerability exists in the parameter 'id' exposed by /pms/admin/visits/view_visit.php (line 4). The issue allows arbitrary SQL commands via unfiltered input, potentially exposing sensitive data. Public references in connected ...

CVE-2022-32396

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/managevisit.php:4...

CVE-2022-32396

CVE-2022-32396 affects Prison Management System v1.0, with a SQL injection in /pms/admin/visits/manage_visit.php:4 via the id parameter. Root cause: lack of input filtering/escaping enabling arbitrary SQL execution. Documented impact includes data exposure (partial/confidentiality/integity/availa...

CVE-2022-32395

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/crimes/managecrime.php:4...

CVE-2022-32395

CVE-2022-32395 affects Prison Management System v1.0. The vulnerability is a SQL injection in the application layer, exploitable via the id parameter in /pms/admin/crimes/manage_crime.php, caused by lack of input filtering/escaping for the id value (CNVD-2022-48391 reference corroborates this). C...

CVE-2022-32394

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/viewinmate.php:3...

CVE-2022-32394

CVE-2022-32394 affects Prison Management System v1.0. A SQL injection vulnerability exists in the /pms/admin/inmates/view_inmate.php:3 endpoint via the id parameter, caused by insufficient input filtering. This is documented across multiple sources (NVD, Red Hat, CNVD, CNVD variants) and explicit...

CVE-2022-32393

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/viewcell.php:4...

CVE-2022-32393

Prison Management System v1.0 contains a SQL injection vulnerability via the id parameter in /pms/admin/cells/view_cell.php:4. The issue arises from insufficient input handling/filter escaping, enabling attackers to inject SQL commands to access or modify data. No exploitation details, affected v...

CVE-2022-32392

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/manageaction.php:4...

CVE-2022-32392

CVE-2022-32392 affects Prison Management System v1.0. The vulnerability is a SQL injection in the admin action path, exploitable via the id parameter in /pms/admin/actions/manage_action.php (line 4). Public docs consistently describe lack of input filtering on id, enabling potentially unauthorize...

CVE-2022-32391

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/viewaction.php:4...

CVE-2022-32391

The CVE-2022-32391 entry relates to Prison Management System v1.0, which contains a SQL injection vulnerability in the id parameter of /pms/admin/actions/view_action.php (line 4). The root cause is lack of proper escaping/filtering for the id input, enabling potentially unauthorized access to dat...

PT-2022-21287

Name of the Vulnerable Software and Affected Versions Prison Management System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter at the "/pms/admin/actions/view action.php" endpoint. There is no information provided about the...

PT-2022-21295

Name of the Vulnerable Software and Affected Versions Prison Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/pms/admin/crimes/view crime.php" endpoint. Recommendations For Prison...

PT-2022-21289

Name of the Vulnerable Software and Affected Versions Prison Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/pms/admin/cells/view cell.php" endpoint. Recommendations For Prison...