Security
Headlines
HeadlinesLatestCVEs

Tag

#php

CVE-2022-40354: Bug_report/SQLi-3.md at main · songbingxue/Bug_report

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_booking.php.

CVE
#sql#vulnerability#windows#php#auth#firefox
CVE-2022-40353: Bug_report/SQLi-2.md at main · songbingxue/Bug_report

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/up_booking.php.

CVE-2022-40352: Bug_report/SQLi-1.md at main · songbingxue/Bug_report

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_traveller.php.

Online Birth Certificate Management System 1.0 Cross Site Scripting

Online Birth Certificate Management System version 1.0 suffers from a cross site scripting vulnerability.

Online Birth Certificate Management System 1.0 Insecure Direct Object Reference

Online Birth Certificate Management System version 1.0 suffers from an insecure direct object reference vulnerability.

Online Birth Certificate Management System 1.0 Cross Site Request Forgery

Online Birth Certificate Management System version 1.0 suffers from a cross site request forgery vulnerability.

Food Ordering Management System 1.0 SQL Injection

Food Ordering Management System version 1.0 suffers from a remote SQL injection vulnerability.

CVE-2022-40099: Bug_report/SQLi-3.md at main · WYB-signal/Bug_report

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense_category.php.

CVE-2022-40097: Bug_report/SQLi-1.md at main · WYB-signal/Bug_report

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_currency.php.