67 matches found
CVE-2024-55517
Summary (CVE-2024-55517) : Polaris FT Intellect Core Banking 9.5’s Interllect Core Search has a vulnerability where input passed via the groupType parameter in /SCGController is mishandled before being used in SQL queries, enabling SQL injection in an authenticated session. Affected component: In...
CVE-2024-55975 WordPress Dr Affiliate plugin <= 1.2.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rohit Urane Dr Affiliate allows SQL Injection.This issue affects Dr Affiliate: from n/a through 1.2.3...
PT-2024-35419 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A SQL injection issue was discovered in the /q/show.php endpoint. This issue allows for potential SQL injection attacks. Recommendations: For ZZCMS version 2023, consider restricting access to the /q/show.php...
PT-2024-21413 · Unknown · School Task Manager
Name of the Vulnerable Software and Affected Versions: School Task Manager version 1.0 Description: A SQL Injection issue allows a remote attacker to obtain sensitive information via a crafted payload to the "delete-task.php" component. This enables unauthorized access to data. Recommendations: F...
PT-2023-15862 · Sciencelogic · Sciencelogic Sl1
Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "admin dynamic app mib errors" feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of...
PT-2022-25918 · Unknown · Open Source Sacco Management System
Name of the Vulnerable Software and Affected Versions: Open Source SACCO Management System version 1.0 Description: A SQL injection issue was found in the id parameter at the /sacco shield/ajax.php?action=delete plan API endpoint. This allows for potential exploitation. Recommendations: For Open...
PT-2022-22606
Name of the Vulnerable Software and Affected Versions Bus Pass Management System version 1.0 Description A SQL Injection issue was found in the Bus Pass Management System. The vulnerability can be exploited via the searchdata parameter at the "/buspassms/download-pass.php" API endpoint...
PT-2022-23275 · Unknown · Sazanrjb Inventorymanagementsystem
Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in Stocks.java allows attackers to execute arbitrary SQL commands via parameters such as productcode. This enables unauthorized access and manipulation of...
PT-2022-23862 · Ems · Ems
Name of the Vulnerable Software and Affected Versions: EMS versions 6.2 Description: A SQL injection issue exists in the school information query interface, specifically in the repschoolproj.php file, which can lead to data leakage. Recommendations: For EMS version 6.2, at the moment, there is no...
Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11188)
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to a SQL injection vulnerability in the /classes/Master .php?f=deletestockout location has an SQL injection issue wit...
PT-2022-23586 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: A SQL injection issue was found in the Library Management System via the bookId parameter at the "/staff/delete.php" API endpoint. Recommendations: For Library Management System version 1.0,...
PT-2022-22922 · Unknown · Sazanrjb Inventorymanagementsystem
Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands via the parameter customerCode in CustomerDAO.java. This enables unauthorized access and manipulation of...
PT-2022-22919 · Unknown · Sazanrjb Inventorymanagementsystem
Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in CustomerDAO.java allows attackers to execute arbitrary SQL commands via the searchTxt parameter. This enables unauthorized access and manipulation of databas...
PT-2022-22449 · Unknown · Pharmacy Management System
Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version 1.0 Description: A SQL injection issue was found in the Pharmacy Management System. The vulnerability can be exploited via the id parameter at the "editproduct.php" endpoint. Recommendations: For Pharmacy...
Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77047)
Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/categories/viewcategory.php?id = A SQL injection issue exists in the page, which can be exploited ...
CVE-2020-14069
An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.php, dhcp.php, hotspot.php, ip.php, pgaviso.php, pgcorte.php, pppoe.php, queues.php, and wifi.php...
Fedora 17 : moodle-2.2.3-1.fc17 (2012-8284)
CVE-2012-2353 MSA-12-0024: Hidden information access issue CVE-2012-2354 MSA-12-0025: Personal communication access issue CVE-2012-2355 MSA-12-0026: Quiz capability issue CVE-2012-2356 MSA-12-0027: Question bank capability issues CVE-2012-2357 MSA-12-0028: Insecure authentication issue...
CS-Cart 1.3.5 - Authentication Bypass
CS-Cart 1.3.5 - Authentication Bypass GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build...
PHP Live Helper <= 2.0.1 Multiple Remote Vulnerabilities
No description provided by source. GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper = 2.0.1 Risk : Multiple Vulnerabilities Description: PHP Live Helper is an online support system written in php that allows...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML via the Word parameter. NOTE: it is possible that this issue is resultant from SQL injection...