Security
Headlines
HeadlinesLatestCVEs

Tag

#php

CVE-2022-32358: bug_report/SQLi-5.md at main · k0xx11/bug_report

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_inquiry.

CVE
Open in Source
#sql#vulnerability#windows#php#firefox
CVE-2022-32355: bug_report/SQLi-6.md at main · k0xx11/bug_report

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/view_product&id=.

CVE-2022-32354: bug_report/SQLi-2.md at main · k0xx11/bug_report

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manage_user&id=.

CVE-2022-32353: bug_report/SQLi-1.md at main · k0xx11/bug_report

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_field_order.php?id=.

CVE-2022-32367: bug_report/SQLi-12.md at main · k0xx11/bug_report

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/view_inquiry&id=.

CVE-2022-32366: bug_report/SQLi-10.md at main · k0xx11/bug_report

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/view_field.php?id=.

CVE-2022-32365: bug_report/SQLi-11.md at main · k0xx11/bug_report

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/manage_field.php?id=.

CVE-2022-32364: bug_report/SQLi-7.md at main · k0xx11/bug_report

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manage_product&id=.

CVE-2022-32337: bug_report/SQLi-1.md at main · k0xx11/bug_report

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/patients/manage_patient.php?id=.

CVE-2021-42675: Internetagentur für Konzept, Design, CMS & eCommerce. – Internetagentur für Konzept, Design, CMS & eCommerce.

Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution.