#sql

A vulnerability was found in SourceCodester Canteen Management System. It has been rated as critical. This issue affects the function query of the file ajax_invoice.php of the component POST Request Handler. The manipulation of the argument search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214523.

2 years ago

CVE

Open in Source

#sql #vulnerability #php

CVE-2022-44097: Book Store Management System— Use of Hard-coded Credentials in Source Code Leads to Admin Panel Access · Issue #2 · upasvi/CVE-

Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

2 years ago

CVE

Open in Source

#sql #windows #php #hard_coded_credentials #auth #ssh

CVE-2022-44096: Sanitization Management System — Use of Hard-coded Credentials in Source Code Leads to Admin Panel Access · Issue #1 · upasvi/CVE-

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

2 years ago

CVE

Open in Source

#sql #windows #php #hard_coded_credentials #auth #ssh

CVE-2022-45328: bug_report/SQLi-1.md at main · zhangzhaoyuela/bug_report

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php.

2 years ago

CVE

Open in Source

#sql #vulnerability #windows #php #auth #firefox

GHSA-cvh4-cjc9-84qm: owncast is vulnerable to SQL Injection

SQL Injection in GitHub repository owncast/owncast prior to 0.0.13.