CVE-2022-29751

CVE-2022-29751 affects Simple Client Management System 1.0. The vulnerability is an SQL injection in the delete_client path (/cms/classes/Master.php?f=delete_client) caused by lack of input validation, enabling arbitrary SQL execution and potential data disclosure/ modification. Root cause stated...

CVE-2022-29981

CVE-2022-29981 affects Simple Client Management System 1.0. The vulnerability is an SQL Injection via the endpoint /cms/classes/Users.php?f=delete, stemming from lack of input validation of the id parameter in the POST request. Public documents consistently describe this as a SQL injection affect...

CVE-2022-29979

CVE-2022-29979 affects Simple Client Management System 1.0. The vulnerability is an SQL injection in /cms/classes/Master.php?f=delete_designation caused by unsanitized input in the id parameter, enabling arbitrary SQL execution. Documented impact indicates partial confidentiality, integrity, and ...

CVE-2022-29979

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deletedesignation...

CVE-2022-29980

The vulnerability CVE-2022-29980 affects Simple Client Management System 1.0. The issue is a SQL injection in the admin user management page, specifically via /cms/admin/?page=user/manage_user&id=, caused by unvalidated external input. This leads to potential exposure of sensitive database data a...

CVE-2022-29982

CVE-2022-29982 affects the Simple Client Management System 1.0. The vulnerability is a SQL injection in the maintenance page handler: /cms/admin/maintenance/manage_service.php?id=, arising from unsafely constructed SQL statements in user-supplied input. The provided sources describe a risk of exp...

CVE-2022-29983

The CVE-2022-29983 entry concerns Simple Client Management System 1.0 and an SQL Injection vulnerability in the admin invoice view endpoint (/cms/admin/?page=invoice/view_invoice&id=). The connected documents confirm the issue arises from lack of input validation/parameter sanitization, enabling ...

CVE-2022-29984

CVE-2022-29984 affects Simple Client Management System 1.0. The vulnerability is a SQL Injection via the parameter in /cms/admin/?page=client/view_client&id=, arising from lack of input validation. Impact per sources ranges from partial confidentiality/integrity/availability to high/critical depe...

[SECURITY] Fedora 36 Update: mingw-SDL2_ttf-2.0.18-3.fc36

Simple DirectMedia Layer SDL2 is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. This package contains a library that allows you to use TrueType fonts to render text in SDL2 applications...

Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Users.php ? f=delete in the post request id parameter...

CVE-2022-29317

The CVE-2022-29317 entry concerns Simple Bus Ticket Booking System v1.0. Connected sources confirm SQL injection vulnerabilities in the login flow, specifically via the username and password parameters handled by /assets/partials/_handleLogin.php. The root cause, as described across multiple data...

CVE-2022-28601

A Two-Factor Authentication 2FA bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism...

CVE-2022-28601

CVE-2022-28601 concerns the Simple 2FA Plugin for Moodle by LMS Doctor. A 2FA bypass exists: remote attackers can overwrite the phone number used for confirmation via profile.php, thus bypassing the phone verification mechanism. The affected component is the Moodle plugin’s 2FA handling; the root...

CVE-2022-28986

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...

CVE-2022-28986

The CVE-2022-28986 entry concerns LMS Doctor Simple 2 Factor Authentication Plugin for Moodle (affected: 2021072900). The vulnerability is an Insecure Direct Object Reference (IDOR) that could let an attacker remotely update sensitive records (email, password, phone number) of other user accounts...

CVE-2022-27470

SDLttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTFRenderTextSolid. This vulnerability is triggered via a crafted TTF file...

CVE-2021-27419

uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

DEBIAN-CVE-2021-27419

uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

CVE-2021-27419

uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure

Unspecified vulnerability in the Simple download-system with counter and categories kkdownloader extension 1.2.1 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors...