CVE-2022-44347

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/viewinquiry&id=...

CVE-2022-44348

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/updatestatus.php?id=...

Sanitization Management System SQL注入漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Sanitization Management System v1.0. An attacker can exploit this vulnerability to perform a SQL injection attack via...

CVE-2022-44277

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=deleteproduct...

CVE-2022-44347

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/viewinquiry&id=...

CVE-2022-44277

CVE-2022-44277 affects Sanitization Management System v1.0. The vulnerability is a SQL Injection in the endpoint /php-sms/classes/Master.php?f=delete_product, arising from improper sanitization in the application’s database queries. According to the incident data, the CVSSv3.1 base score is 7.2 (...

CVE-2022-44345

CVE-2022-44345 affects the web application product Sanitization Management System v1.0 . The vulnerability is a SQL Injection triggered through the endpoint /php-sms/admin/?page=quotes/view_quote&id= , where the unvalidated/unsafely processed id parameter enables injection. The CVSS 3.1 data in t...

CVE-2022-44296

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manageremark.php?id=...

CVE-2022-44296

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manageremark.php?id=...

CVE-2022-44295

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assignteam.php?id=...

CVE-2022-44294

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manageservice&id=...

CVE-2022-44294

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manageservice&id=...

CVE-2022-44295

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assignteam.php?id=...

Sql injection

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manageservice&id=...

Sql injection

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assignteam.php?id=...

Sql injection

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manageremark.php?id=...

CVE-2022-44096

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...

CVE-2022-44096

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...

Hardcoded credentials

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...

CVE-2022-44295

CVE-2022-44295 affects Sanitization Management System v1.0. The Connected documents and the Initial description consistently state a SQL Injection vulnerability exploitable via the endpoint /php-sms/admin/orders/assign_team.php?id=. They do not provide explicit root-cause details beyond the SQL i...