5 matches found
CVE-2026-4784 code-projects Simple Laundry System Parameter checkcheckout.php sql injection
A vulnerability was found in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /checkcheckout.php of the component Parameter Handler. The manipulation of the argument serviceId results in sql injection. It is possible to launch the attack remotely. The exploit...
CVE-2024-11729
The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to SQL Injection via the 'servicelist0serviceid' parameter of the getwidgetpaymentoptions AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter an...
CIGESv2 SQL注入漏洞
CIGESv2 is a queue and reservation management system from CIGESv2. CIGESv2 suffers from an SQL injection vulnerability that stems from an SQL injection vulnerability in the parameter idServicio of /ajaxServiciosAtencion.php...
CVE-2019-16194
SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svcid parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php...
CVE-2019-6295
Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...