PT-2022-21021

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue allows for SQL Injection via the /bcms/admin/?page=user/manage user&id= API endpoint, potentially allowing unauthorized access to sensitive data. The id parameter is vulnerab...

PT-2022-20082

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue allows for SQL Injection via the "/sns/admin/?page=posts/view post&id=" API endpoint, specifically targeting the id variable. This could potentially lead to...

PT-2021-19641

Name of the Vulnerable Software and Affected Versions: Hexagon G!nius Auskunftsportal versions prior to 5.0.0.0 Description: The issue allows SQL injection via the id parameter in the "GiPWorkflow/Service/DownloadPublicFile" API endpoint. This could potentially lead to unauthorized access to...

PT-2021-16400

Name of the Vulnerable Software and Affected Versions: HPE Cloudline CL5800 Gen9 Server HPE Cloudline CL5200 Gen9 Server HPE Cloudline CL4100 Gen10 Server HPE Cloudline CL3100 Gen10 Server HPE Cloudline CL5800 Gen10 Server Description: The Baseboard Management Controller BMC in the affected HPE...

PT-2018-12602

Name of the Vulnerable Software and Affected Versions CWJoomla CW Article Attachments PRO extension versions prior to 2.0.7 CW Article Attachments FREE extension versions prior to 1.0.6 Description The issue allows SQL Injection within the "download.php" endpoint. This could potentially lead to...

PT-2018-12223

Name of the Vulnerable Software and Affected Versions Firebase Cloud Messaging FCM + Advance Admin Panel versions prior to 2017-10-26 Description The issue allows SQL injection via the "/advance push/public/login" API endpoint, specifically through the username parameter. This could potentially...