2423 matches found
CVE-2022-32365
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/manage_field.php?id=. The vulnerability is confirmed across multiple catalogs (NVD, Red Hat, CNVD/CNNVD) with descriptions stating that an attacker can execute illegal SQL commands to steal sensitive database data. ...
CVE-2022-32366
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/viewfield.php?id=...
CVE-2022-32366
CVE-2022-32366 concerns Product Show Room Site v1.0, where a SQL injection vulnerability exists in the PHP file /psrs/admin/fields/view_field.php?id=. Connected records consistently describe SQL injection in this endpoint, indicating improper handling of the id parameter that allows arbitrary SQL...
CVE-2022-32367
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/viewinquiry&id=...
CVE-2022-32367
Product Show Room Site v1.0 is explicitly identified as vulnerable to SQL injection via the parameter in the URL /psrs/admin/?page=inquiries/view_inquiry&id=. The CVE entry notes an SQLi vulnerability without providing patch details; the root cause is described by mirrored records as an unsafe SQ...
PT-2022-21261
Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/categories/manage category.php?id=" endpoint. This allows for potential exploitation by injecting malicious SQL code. No information is provid...
PT-2022-21256
Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/categories/manage field order.php?id=" API endpoint, where the id variable is vulnerable. This allows for potential unauthorized access and...
PT-2022-21262
Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/categories/view category.php" API endpoint, specifically through the id variable. This allows for potential unauthorized access and manipulati...
Product Show Room Site SQL注入漏洞
Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/?page=user/manageuser&id= page. SQL injection problem. No detailed vulnerability details are...
PT-2022-21266
Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the /psrs/admin/?page=inquiries/view inquiry&id= endpoint. This allows for potential data manipulation. No information is provided about the estimated number o...
PT-2022-21257
Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/?page=user/manage user&id=" endpoint. This allows for potential exploitation. No information is provided about the estimated number of...
PT-2022-21258
Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/?page=products/view product&id=" endpoint. This allows for potential exploitation by injecting malicious SQL code. Recommendations For Product...
PT-2022-21260
Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/psrs/classes/Master.php?f=delete category" API endpoint. This allows for potential manipulation of database queries. No informati...
Product Show Room Site SQL注入漏洞
Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/categories/viewcategory.php?id = A SQL injection issue exists in the page, which can be exploited ...
PT-2022-21264
Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "/psrs/admin/fields/manage field.php?id=" endpoint. The estimated number of potentially affected devices worldwide is not specified...
PT-2022-21259
Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/classes/Master.php?f=delete inquiry" API endpoint. This allows for potential manipulation of database queries. No information is provided about the...
Product Show Room Site SQL注入漏洞
Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/viewfield.php?id=page. SQL injection problem, an attacker can use this vulnerabilit...
CVE-2022-32363: Improper Neutralization of Special Elements used in an SQL Command
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/viewcategory.php?id=...
PT-2022-21265
Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/fields/view field.php" endpoint, specifically through the id variable. This allows for potential unauthorized access and manipulation of...
Product Show Room Site SQL注入漏洞
Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from /psrs/classes/Master.php?f=deletecategory The page lacks validation for external input SQL statements, which can b...