2358 matches found
CVE-2022-36715
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...
CVE-2022-36715
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...
CVE-2022-36715: Improper Neutralization of Special Elements used in an SQL Command
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...
PT-2022-23578
Name of the Vulnerable Software and Affected Versions Library Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the name parameter at the "/admin/search.php" API endpoint. Recommendations For Library Management...
Simple E-Learning System SQL Injection Vulnerability (CNVD-2023-11439)
Simple E-Learning System is a simple e-learning system from Carlo Montero's personal developer. simple E-Learning System is vulnerable to SQL injection due to a lack of validation of external input SQL statements in the search.php parameter searchPost. . An attacker could use this vulnerability t...
CVE-2022-2698
A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument searchPost leads to sql injection. The attack can be launched remotely. The...
CVE-2022-2698: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument searchPost leads to sql injection. The attack can be launched remotely. The...
CVE-2022-2490: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Simple E-Learning System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument classCode with the input 1'||SELECT 0x74666264 WHERE 5610=5610 AND SELECT 7504 FROMSELECT...
PT-2022-16969
Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-Learning System version 1.0 Description A critical vulnerability has been found in the SourceCodester Simple E-Learning System. The issue is related to an unknown function of the file search.php. The manipulation of the...
CVE-2017-20129
A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file /LogoStore/search.php. The manipulation of the argument query with the input test' UNION ALL SELECT...
Sql injection
A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file /LogoStore/search.php. The manipulation of the argument query with the input test' UNION ALL SELECT...
CVE-2017-20129: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file /LogoStore/search.php. The manipulation of the argument query with the input test' UNION ALL SELECT...
PT-2022-7996
Name of the Vulnerable Software and Affected Versions LogoStore affected versions not specified Description A critical issue has been identified, allowing for SQL injection through the manipulation of the query argument in the /LogoStore/search.php file. This can be achieved by providing a specif...
LogoStore SQL Injection Vulnerability
LogoStore is an online store from LogoStore Inc. in the United States. A security vulnerability exists in LogoStore that stems from an unknown function in the affected file /LogoStore/search.php. The function can lead to SQL injection, potentially launching an attack from a remote location. It is...
atoms183 CMS SQL Injection Vulnerability
atoms183 CMS is a content management system by the individual developer of Дмитрий Глазвин. A SQL injection vulnerability exists in atoms183 CMS version 1.0, which can be exploited by an attacker to execute arbitrary commands on search.php via the Name, Fname, and ID parameters...
CVE-2021-35283
SQL Injection vulnerability in productadmin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to search.php...
Sql injection
SQL Injection vulnerability in productadmin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to search.php...
CVE-2021-35283
SQL Injection vulnerability in productadmin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to search.php...
PT-2022-10457
Name of the Vulnerable Software and Affected Versions atoms183 CMS version 1.0 Description The issue allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to the "search.php" endpoint. This enables attackers to potentially manipulate data or execute unauthorized...
CVE-2022-29650: Improper Neutralization of Special Elements used in an SQL Command
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...