10 matches found
PT-2026-106786
Name of the Vulnerable Software and Affected Versions SourceCodester Performance Indicator System version 1.0 Description An issue exists in the /opils/admin/view product.php file where manipulating the Category argument allows for SQL injection, a technique used to interfere with the queries tha...
PT-2022-27325
Name of the Vulnerable Software and Affected Versions Automotive Shop Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/asms/products/view product.php" API endpoint. Recommendations Fo...
PT-2022-21030
Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "id" parameter in the "/bcms/admin/products/view product.php" API endpoint. Recommendations For Badminton Center Managemen...
PT-2022-17966
Name of the Vulnerable Software and Affected Versions Multi-Vendor Online Groceries Management System version 1.0 Description A blind SQL injection issue was found in the Multi-Vendor Online Groceries Management System. The issue is related to the id parameter in the "/products/view product.php"...
CVE-2017-17602
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...
Sql injection
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...
CVE-2017-17602
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...
PT-2017-14898
Name of the Vulnerable Software and Affected Versions Advance B2B Script version 2.1.3 Description The issue is related to SQL Injection, which can be exploited via the show id parameter in the "tradeshow-list-detail.php" endpoint or the pid parameter in the "view-product.php" endpoint...
CVE-2017-17602: Improper Neutralization of Special Elements used in an SQL Command
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...
Advance B2B Script 2.1.3 - show_id pid SQL Injection
Advance B2B Script 2.1.3 - showid pid SQL Injection Exploit Title: Advance B2B Script 2.1.3 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advance-b2b-script/ Demo: http://198.38.86.159/advancedb2b/...