EUVD-2022-37853

Malicious code in bioql PyPI...

EUVD-2022-37855

Malicious code in bioql PyPI...

CVE-2022-34946

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php...

CVE-2022-34953

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php...

EsafeNet CDG 注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. An injection vulnerability exists in EsafeNet CDG version 5.6.3.154.205, which originates from improper handling of the startDate/endDate parameter in the /CDGServer3/logManagement/ClientSortLog.jsp file, resulting in SQL...

CVE-2025-1841: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The...

PT-2025-9234

Name of the Vulnerable Software and Affected Versions ESAFENET CDG version 5.6.3.154.205 Description A critical vulnerability has been found in ESAFENET CDG, affecting an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the startDate and endDate arguments...

CVE-2023-48893

SLiMS aka SENAYAN Library Management System through 9.6.1 allows admin/modules/reporting/customs/staffact.php SQL Injection via startDate or untilDate...

CVE-2023-48893

SLiMS aka SENAYAN Library Management System through 9.6.1 allows admin/modules/reporting/customs/staffact.php SQL Injection via startDate or untilDate...

Sql injection

SLiMS aka SENAYAN Library Management System through 9.6.1 allows admin/modules/reporting/customs/staffact.php SQL Injection via startDate or untilDate...

CVE-2023-48893: Improper Neutralization of Special Elements used in an SQL Command

SLiMS aka SENAYAN Library Management System through 9.6.1 allows admin/modules/reporting/customs/staffact.php SQL Injection via startDate or untilDate...

PT-2023-31001

Name of the Vulnerable Software and Affected Versions SLiMS versions prior to 9.6.2 Description The issue allows for SQL injection, potentially enabling a remote attacker to obtain sensitive information and execute arbitrary code. This can be achieved by crafting a script to the date parameter in...

CVE-2023-48893

SLiMS aka SENAYAN Library Management System through 9.6.1 allows admin/modules/reporting/customs/staffact.php SQL Injection via startDate or untilDate...

CVE-2023-48893

SLiMS aka SENAYAN Library Management System through 9.6.1 allows admin/modules/reporting/customs/staffact.php SQL Injection via startDate or untilDate...

Invalid startDate check in SecurityCouncilNomineeElectionGovernorTiming contract

Lines of code Vulnerability details Summary The SecurityCouncilNomineeElectionGovernorTiming contract has an invalid startDate check in the SecurityCouncilNomineeElectionGovernorTiminginit function. The check ensures that the startDate is in the future, but it does not check that the startDate is...

CVE-2022-4889

A vulnerability classified as critical was found in visegripped Stracker. Affected by this vulnerability is the function getHistory of the file docroot/publichtml/stracker/api.php. The manipulation of the argument symbol/startDate/endDate leads to sql injection. The identifier of the patch is...

Stracker SQL注入漏洞

Stracker is an application by visegripped individual developers. Stracker suffers from a SQL injection vulnerability that stems from the fact that incorrect manipulation of the parameters symbol/startDate/endDate can lead to sql injection...

CVE-2022-4889: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in visegripped Stracker. Affected by this vulnerability is the function getHistory of the file docroot/publichtml/stracker/api.php. The manipulation of the argument symbol/startDate/endDate leads to sql injection. The identifier of the patch is...

Pharmacy Management System getOrderReport.php SQL Injection Vulnerability

Pharmacy Management System MPMS is a multilingual pharmacy management system from the personal developer Mayuri K. A SQL injection vulnerability exists in Pharmacy Management System v1.0, which stems from the getOrderReport.php startDate parameter in getOrderReport.php lacks validation for extern...

Pharmacy Management System getsalereport.php SQL Injection Vulnerability

Pharmacy Management System MPMS is a multi-lingual pharmacy management system by Mayuri K. Personal developer. version v1.0 of Pharmacy Management System is vulnerable to SQL injection, which stems from the startDate parameter in getsalereport.php parameter in getsalereport.php lacks validation f...