Security
Headlines
HeadlinesLatestCVEs

Tag

#php

CVE-2022-30797: bug_report/SQLi-3.md at main · k0xx11/bug_report

Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.

CVE
Open in Source
#sql#vulnerability#windows#php#auth#firefox
CVE-2022-30795: bug_report/SQLi-4.md at main · k0xx11/bug_report

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php.

CVE-2022-30798: bug_report/SQLi-2.md at main · k0xx11/bug_report

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.

CVE-2022-30794: bug_report/SQLi-1.md at main · k0xx11/bug_report

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php.

CVE-2022-30804: bug_report/delet-file-1.md at main · k0xx11/bug_report

elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.

CVE-2022-30799: bug_report/SQLi-5.md at main · k0xx11/bug_report

Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.

CVE-2022-29627: OpenSource/exploit_idor.md at main · nsparker1337/OpenSource

An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers.

CVE-2022-29628: OpenSource/exploit_rxss.md at main · nsparker1337/OpenSource

A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter.

CVE-2022-29659: Responsive Online Blog Website using PHP/MySQL with Source Code

Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php.

CVE-2022-29711: Fix Graylog XSS by murrant · Pull Request #13931 · librenms/librenms

LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php.