CVE-2026-110109

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via POST /device/transparent-codec/productId. Because the endpoint lacks @SaveAction, attackers can save arbitrary codec...

CVE-2026-110109

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via POST /device/transparent-codec/productId. Because the endpoint lacks @SaveAction, attackers can save arbitrary codec...

CVE-2026-110109

Versions of JetLinks Community through 2.10.0 are susceptible to a missing authorization vulnerability (CWE-862) in the transparent-codec component. An attacker with only query access can exploit the POST /device/transparent-codec/{productId} endpoint, which lacks the required @SaveAction permiss...

CVE-2026-110109 JetLinks Community through 2.10.0 Missing Authorization via Product-Level Transparent Codec Save

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via POST /device/transparent-codec/productId. Because the endpoint lacks @SaveAction, attackers can save arbitrary codec...

CVE-2026-110109: Missing Authorization

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via POST /device/transparent-codec/productId. Because the endpoint lacks @SaveAction, attackers can save arbitrary codec...

CVE-2026-75340

The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...

EUVD-2008-5612

Malware in sbrugna...

EUVD-2006-4869

Malware in sbrugna...

EUVD-2022-46320

Malicious code in bioql PyPI...

Inventory Management System removeProduct.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. The Inventory Management System suffers from a SQL injection vulnerability that originates from the /phpaction/removeProduct.php file not securely filtering the productId parameter. An attacker can exploit this vulnerability to remote...

CVE-2025-6822: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /phpaction/removeProduct.php. The manipulation of the argument productId leads to sql injection. The attack can be initiated remotely...

CVE-2022-43276

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /phpaction/fetchSelectedfood.php...

WordPress Plugin Shopping Cart & eCommerce Store 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2024-3211: Improper Neutralization of Special Elements used in an SQL Command

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to SQL Injection via the 'productid' attribute of the ecaddtocart shortcode in all versions up to, and including, 5.6.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2022-43276

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /phpaction/fetchSelectedfood.php...

CVE-2022-43276

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /phpaction/fetchSelectedfood.php...

CVE-2022-43276

CVE-2022-43276 affects Canteen Management System v1.0. The vulnerability is a SQL injection via the productId parameter in /php_action/fetchSelectedfood.php, caused by unsanitized input. The CVSS has high impact across confidentiality, integrity, and availability (7.2). Some connected records ind...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. Canteen Management System version 1.0 suffers from a SQL injection vulnerability that stems from the productId parameter of /phpaction/fetchSelectedfood.php being susceptible to SQL injection...

CVE-2022-43276

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /phpaction/fetchSelectedfood.php...

PT-2022-26822 · Unknown · Canteen Management System

Name of the Vulnerable Software and Affected Versions: Canteen Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the productId parameter at the "/php action/fetchSelectedfood.php" API endpoint. Recommendations...