15496 matches found
mingSoft Mcms SQL Injection Vulnerability (CNVD-2022-09254)
MingSoft Mcms is China's MingFei MingSoft company's a complete open source J2ee system . A security vulnerability exists in MingSoft Mcms that stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...
Hospital Managment System SQL Injection Vulnerability (CNVD-2022-22666)
Hospital Managment System HMS is a computer or web-based system that helps manage the operations of a hospital or any medical facility.Hospital Managment System is vulnerable to a SQL injection vulnerability that stems from a database based application that lacks validation of externally entered...
CVE-2021-43420
SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...
CVE-2021-41471
SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...
Sql injection
SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...
CVE-2021-41472
SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...
CVE-2021-41471
SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...
EUVD-2021-28063
SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...
Mitsubishi Electric MC Works64 Buffer Overflow Vulnerability
Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric MC Works64 that stems from a coding error in the SQL query engine memory allocation code that makes it possible to execute a seri...
CVE-2021-43420: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...
CVE-2021-41471: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...
PT-2022-11457
Name of the Vulnerable Software and Affected Versions Sourcecodester Patient Appointment Scheduler System version 1 Description The issue allows attackers to execute arbitrary SQL commands via the username and password fields to "login.php" API endpoint. This enables unauthorized access and...
Sourcecodester Purchase Order Management System SQL Injection Vulnerability
Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. SQL injection vulnerability exists in Sourcecodester Purchase Order Management System, which Sourcecodester Purchase Order Management...
PT-2022-11416
Name of the Vulnerable Software and Affected Versions Sourcecodester South Gate Inn Online Reservation System version v1 Description The issue allows attackers to execute arbitrary SQL commands via the email and Password parameters. This can be exploited by sending malicious input to the affected...
Sql injection
SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...
CVE-2021-40247: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field...
Apache log4j Chainsaw deserialization code execution vulnerability
Apache Log4j is a Java-based open source logging tool from the Apache Foundation. Apache log4j Chainsaw is vulnerable to deserialized code execution. The vulnerability stems from insufficient cleanup of user-supplied data in JDBCAppender in a non-default configuration with JDBCAppender enabled. A...
SQL Injection
SchedMD is vulnerable to sql injection. A malicious attacker can issue SQL commands to allow attacker to inject sql injection...
pimcore SQL Injection Vulnerability (CNVD-2022-07503)
Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications. pimcore has a SQL injection vulnerability,...