CVE-2022-31953: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/viewreport.php?id=...

CVE-2022-31350: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/managevehicle.php?id=...

CVE-2022-31959: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/teams/manageteam.php?id=...

CVE-2022-31982: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/viewrequest&id=...

CVE-2022-31352: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manageservice.php?id=...

CVE-2022-31980: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manageteam&id=...

CVE-2022-31971: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/viewresponse&id=...

CVE-2022-30833: Improper Neutralization of Special Elements used in an SQL Command

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientedit.php?booking=31&userid=...

CVE-2022-29682: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del...

CVE-2022-29305: Improper Neutralization of Special Elements used in an SQL Command

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

ROS-20220524-04

The vulnerability in the Moodle course management system is due to a problem in the logic used to count of failed login attempts. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the account lockout threshold. remotely to bypass the account lockout threshold A...

CVE-2022-1361

The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices...

CVE-2022-1358

The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database...

CVE-2022-1361 Cambium Networks cnMaestro SQL Injection

The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices...

CVE-2022-1361

The CVE-2022-1361 entry affects Cambium Networks cnMaestro On-Premises, caused by improper neutralization of special elements used in an SQL command, enabling pre-auth data exfiltration of user and device information. Affected versions are cnMaestro On-Premises prior to 3.0.3-r32, 2.4.2-r29, and ...

CVE-2022-1358

CVE-2022-1358 affects Cambium Networks cnMaestro On-Premises, with an SQL Injection flaw due to improper neutralization of special elements in SQL commands. This vulnerability can enable data exfiltration from the cnMaestro database. The issue is specific to the On-Premises deployment and is list...

CVE-2021-41965

A SQL injection vulnerability exists in ChurchCRM version 2.0.0 to 4.4.5 that allows an authenticated attacker to issue an arbitrary SQL command to the database through the unsanitized ENtyid, theID and EID fields used when an Edit action on an existing record is being performed...

CVE-2022-30374: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions/managetransaction&id=...

CVE-2022-29994: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/managefacility&id=...

CVE-2022-30000: Improper Neutralization of Special Elements used in an SQL Command

Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?reciptno=...