EUVD-2022-46273

Malicious code in bioql PyPI...

CVE-2023-5926 Campcodes Simple Student Information System update_status.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Simple Student Information System 1.0. Affected is an unknown function of the file /admin/students/updatestatus.php. The manipulation of the argument studentid leads to sql injection. The exploit has been disclosed to the...

CVE-2023-5926: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Campcodes Simple Student Information System 1.0. Affected is an unknown function of the file /admin/students/updatestatus.php. The manipulation of the argument studentid leads to sql injection. The exploit has been disclosed to the...

CVE-2023-2244: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

CVE-2023-1564: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/transactions/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

CVE-2023-1042 SourceCodester Online Pet Shop We App update_status.php cross site scripting

A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /petshop/admin/orders/updatestatus.php. The manipulation of the argument oid with the input 1"alert1111 leads to cross site scripting. The...

CVE-2023-1042: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /petshop/admin/orders/updatestatus.php. The manipulation of the argument oid with the input 1" leads to cross site scripting. The attack c...

CVE-2023-0980: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/registrations/updatestatus.php of the component Status Update Handler. The manipulation of the argument id leads to sql injection...

CVE-2022-44348: Improper Neutralization of Special Elements used in an SQL Command

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/updatestatus.php?id=...

CVE-2022-44860: Improper Neutralization of Special Elements used in an SQL Command

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/updatestatus.php...

CVE-2022-43127: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/updatestatus.php...

CVE-2022-43229: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/updatestatus.php...

CVE-2022-30490: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/courtrentals/updatestatus.php...

CVE-2022-31348: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/updatestatus.php?id=...

CVE-2022-30415: Improper Neutralization of Special Elements used in an SQL Command

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/applications/updatestatus.php?id=...

CVE-2022-30412: Improper Neutralization of Special Elements used in an SQL Command

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/individuals/updatestatus.php?id=...