Sql injection

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=...

Sql injection

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=...

Sql injection

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonumber/index.php?view=edit&id=...

CVE-2022-38269

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=...

CVE-2022-38269

The CVE-2022-38269 entry corresponds to a SQL injection vulnerability in School Activity Updates with SMS Notification v1.0, exposed through the vulnerable endpoint /modules/modstudent/index.php?view=edit&id=. The linked Red Hat/NVD records confirm the affected software and the injection path. Ro...

CVE-2022-38268

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonumber/index.php?view=edit&id=...

CVE-2022-38268

CVE-2022-38268 affects School Activity Updates with SMS Notification v1.0. The vulnerability is a SQL injection in the component /modules/autonumber/index.php?view=edit&id= (id parameter), allowing an attacker to manipulate queries. The NVD metrics assign a base score of 7.2 (HIGH) with NETWORK a...

CVE-2022-38267

CVE-2022-38267 affects School Activity Updates with SMS Notification v1.0. The vulnerability is a SQL injection in the /modules/user/index.php?view=edit&id= parameter, as described across multiple sources. The underlying issue is unvalidated input in the id parameter leading to potential data dis...

CVE-2022-38267

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=...

PT-2022-24323 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the /modules/autonumber/index.php?view=edit&id= component. The id parameter ...

School Activity Updates with SMS Notification v1.0 SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is an activity in the school. A security vulnerability exists in School Activity...

GHSA-VWFV-QPW8-83C7 Access token stored in plain text by Jenkins SMS Notification Plugin

Jenkins SMS Notification Plugin 1.2 and earlier stores an access token unencrypted in its global configuration file com.hoiio.jenkins.plugin.SMSNotification.xml on the Jenkins controller as part of its configuration. This access token can be viewed by users with access to the Jenkins controller...

Access token stored in plain text by Jenkins SMS Notification Plugin

Jenkins SMS Notification Plugin 1.2 and earlier stores an access token unencrypted in its global configuration file com.hoiio.jenkins.plugin.SMSNotification.xml on the Jenkins controller as part of its configuration. This access token can be viewed by users with access to the Jenkins controller...

CVE-2020-2297

Jenkins SMS Notification Plugin 1.2 and earlier stores an access token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

CVE-2020-2297

The CVE-2020-2297 entry concerns Jenkins SMS Notification Plugin versions 1.2 and earlier, where an access token is stored unencrypted in the global configuration file on the Jenkins controller. The file com.hoiio.jenkins.plugin.SMSNotification.xml can be viewed by users with filesystem access, e...

PT-2020-15527 · Jenkins · Jenkins Sms Notification Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins SMS Notification Plugin versions 1.2 and earlier Description: The issue concerns the storage of an access token in an unencrypted form within the global configuration file on the Jenkins controller. Specifically, the file...

Alumni Tracer SMS Notification Cross Site Request Forgery / SQL Injection

Exploit Title: Alumni Tracer SMS Notification - SQL Injection / Cross-Site Request Forgery Add/Update Admin Dork: N/A Date: 2018-12-06 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/php/12825/alumni-tracer-sms-notification-using-phpmysqli.html Software Link:...

Alumni Tracer SMS Notification - SQL Injection / Cross-Site Request Forgery

Exploit Title: Alumni Tracer SMS Notification - SQL Injection / Cross-Site Request Forgery Add/Update Admin Dork: N/A Date: 2018-12-06 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/php/12825/alumni-tracer-sms-notification-using-phpmysqli.html Software Link:...