Tailor Management System SQL注入漏洞

Tailor Management System is a tailor store management system. A SQL injection vulnerability exists in the Tailor Management System version, which stems from the existence of a SQL injection vulnerability that can be exploited by a remote, authenticated attacker to execute arbitrary code...

CVE-2020-36072

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter...

CVE-2020-36074

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...

CVE-2020-36071

SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the email.php page...

CVE-2020-36071

SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the email.php page...

CVE-2020-36072

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter...

CVE-2020-36073

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail parameter of the document.php page...

CVE-2020-36074

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...

PT-2023-11801 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailor Management System version 1 Description: A SQL injection issue allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the "email.php" page. This enables the attacker to potentially access and...

CVE-2020-36072

CVE-2020-36072 is a SQL injection vulnerability in Tailor Management System v1 . The issue allows a remote attacker to execute arbitrary code through the id parameter. The entry is scored with CVSS v3.1 (8.8 HIGH) , with attack vector network , complexity low , privileges low , user interaction n...

CVE-2020-36071

Tailor Management System v1 contains an SQL injection in the email.php page, exploited via the customer parameter. Root cause: unsanitized input enabling code execution. Impact: remote authenticated attacker could execute arbitrary code with high confidentiality, integrity, and availability impac...

CVE-2020-36074

CVE-2020-36074 is a SQL injection vulnerability in Tailor Mangement System v.1, where a remote attacker can cause arbitrary code execution through the title parameter. The issue stems from improper input handling in a query path involving the title field. Multiple connected sources corroborate th...

CVE-2020-36073

Tailor Management System v1 is affected by a SQL injection in the detail parameter of the document.php page. The vulnerability may allow a remote attacker to execute arbitrary code via SQL injection. Root cause: unsafely constructed input into the detail parameter leading to code execution. No fi...

PT-2023-11803 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailor Management System version 1 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the detail parameter of the "document.php" page. This enables the attacker to potentially access or modify sensitive...

CVE-2020-36073: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail parameter of the document.php page...

CVE-2020-36071: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the email.php page...

CVE-2020-36074: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...

CVE-2020-36072: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter...

PT-2023-11802 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailor Management System version 1 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the id parameter. This enables the attacker to potentially access or modify sensitive data. Recommendations: For Tail...

CVE-2023-1632

DISPUTED A vulnerability has been found in Ellucian Banner Web Tailor 8.6 and classified as critical. This vulnerability affects unknown code of the file /PRODar/twbkwbis.PFirstMenu of the component Login Page. The manipulation of the argument PIDM/WEBID leads to improper authorization. The attac...