CVE-2023-41521: Improper Neutralization of Special Elements used in an SQL Command

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...

CVE-2023-41521

Student Attendance Management System v1 contains multiple SQL injection vulnerabilities located in the createSessionTerm.php file. The root cause is the incorrect manipulation and lack of sanitization of the id, termId, and sessionName parameters. Successful exploitation could allow an attacker t...

PT-2015-5683

Name of the Vulnerable Software and Affected Versions Webshop hun version 1.062S Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the termid or nyelv id parameter to the "index.php" endpoint. Recommendations For version 1.062S, consider...

CVE-2015-2242: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the 1 termid or 2 nyelvid parameter to index.php...

Webshop Hun 1.062S Cross Site Scripting

Webshop hun v1.062S XSS Cross-site Scripting Security Vulnerabilities Exploit Title: Webshop hun v1.062S /index.php Multiple Parameters XSS Security Vulnerabilities Product: Webshop hun Vendor: Webshop hun Vulnerable Versions: v1.062S Tested Version: v1.062S Advisory Publication: Mar 04, 2015...