Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which stems from a lack of validation of external SQL statements in /cms/admin/?page=...

Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Master. php?f=deleteservice, the id parameter of the...

Insurance Management System SQL注入漏洞

Insurance Management System is an insurance management system from the personal developer Angel Jude Reyes Suarez. Insurance Management System 1.0 is vulnerable to SQL injection, which could be exploited by attackers to obtain information about data in the target system...

CVE-2022-29008

An insecure direct object reference IDOR vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive information...

CVE-2022-29007

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows attackers to bypass authentication...

CVE-2022-29655

An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29318

An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-19361 · Unknown · Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: Dairy Farm Shop Management System version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication. Recommendations: Fo...

Royal Event Management System SQL注入漏洞

Royal Event Management System is an event management system. version v1.0 of Royal Event Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the todate parameter. An attacker could use this vulnerability to execute illegal...

CVE-2022-27299

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php...

SCBS Online Sports Venue Reservation System 安全漏洞

SCBS Online Sports Venue Reservation System is an application. A security vulnerability exists in SCBS Online Sports Venue Reservation System v1.0, which was discovered to contain a local file inclusion vulnerability. An attacker can execute arbitrary code via a crafted PHP file...

CVE-2022-28439

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4...

CVE-2022-28432

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2...

CVE-2022-28433

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=...

CVE-2022-28413

Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deleteenrollment...

CVE-2022-28019

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...

CVE-2022-28012

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...

CVE-2022-28021

Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...

Purchase Order Management System 代码问题漏洞

Purchase Order Management System is a purchase order management system by Carlo Montero Personal Developer. Purchase Order Management System v1.0 has a security vulnerability that can be exploited by attackers via /purchaseorder/admin/?page=user...

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminemployee edit.php lacks validation of external input...