1915 matches found
CVE-2022-33049
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manageuser...
CVE-2022-31908
Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...
Sql injection
Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...
CVE-2022-32376
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getevents.php?eventid=...
CVE-2022-32334
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/managecategory.php?id=...
The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.
The vulnerability of the DNS Server component of the Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2021-42890
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack...
Code injection
Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to Local File Inclusion LFI. Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the...
CVE-2022-32006
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/viewservice.php?id=...
Sql injection
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/tableeditajax.php...
Online Fire Reporting System SQL注入漏洞
Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/requests/take action.php?id=Lack of validation of external input SQL statements...
CVE-2022-31350
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/managevehicle.php?id=...
USN-5452-1 ntfs-3g vulnerability
It was discovered that NTFS-3G was incorrectly validating NTFS metadata in its ntfsck tool by not performing boundary checks. A local attacker could possibly use this issue to cause a denial of service or to execute arbitrary code...
CVE-2022-29683
CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/pagedel...
CVE-2021-32935
CVE-2021-32935 affects Cognex In-Sight OPC Server (v5.7.4 (96) and prior). The vulnerability is Deserialization of Untrusted Data (CWE-502) in the OPC Server, allowing a remote attacker to execute system-level commands and achieve local privilege escalation. CVSS v3.1 base score 9.8 (CRITICAL) pe...
PT-2022-19348 · Unknown · Online Banquet Booking System
Name of the Vulnerable Software and Affected Versions: Online Banquet Booking System version 1.0 Description: A Cross-Site Request Forgery CSRF issue allows attackers to change admin credentials via a crafted POST request. Recommendations: For Online Banquet Booking System version 1.0, consider...
Online Sports Complex Booking SystemSQL注入漏洞
Online Sports Complex Booking System is an online stadium booking system. Online Sports Complex Booking System version 1.0 is vulnerable to SQL injection and no details of the vulnerability are available...
Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2022-64231)
Aruba ClearPass Policy Manager is an application of the U.S. company Aruba to provide wireless network security access management system Aruba ClearPass Policy Manager has a command injection vulnerability, the vulnerability stems from the user input structure to execute the command process, the...
Insurance Management System SQL Injection Vulnerability
Insurance Management System is an insurance management system from the personal developer Angel Jude Reyes Suarez. Insurance Management System 1.0 is vulnerable to SQL injection, which could be exploited by attackers to obtain information about data in the target system...