5 matches found
CVE-2022-38267: Improper Neutralization of Special Elements used in an SQL Command
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=...
CVE-2022-31356: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=...
CVE-2022-32010: Improper Neutralization of Special Elements used in an SQL Command
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/user/index.php?view=edit&id=...
CVE-2022-32007: Improper Neutralization of Special Elements used in an SQL Command
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=...
CVE-2022-32012: Improper Neutralization of Special Elements used in an SQL Command
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/employee/index.php?view=edit&id=...