4 matches found
CVE-2023-2699: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.0. Affected by this issue is some unknown functionality of the file admin/?page=items/viewitem of the component GET Parameter Handler. The manipulation of the argument id leads ...
Lost and Found Information System SQL注入漏洞
Lost and Found Information System is a lost and found information system by the individual developer oretnom23. A SQL injection vulnerability exists in SourceCodester Lost and Found Information System version 1.0, which stems from a problem in the file admin/?page=items/viewitem of the component...
CVE-2009-4785: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Quick News comquicknews component for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a viewitem action to index.php...
CVE-2001-1019: Undefined Security Weakness
Directory traversal vulnerability in viewitem CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the HTMLFILE parameter...