CWE:

	Topic	Date	Author
Med.	Hospital Management System Project In ASP.Net MVC 1 SQL Injection	17.07.2024	0xMykull
Med.	WordPress Poll Maker 5.3.2 SQL Injection	11.07.2024	tmrswrr
Med.	WordPress Poll 2.3.6 SQL Injection	09.07.2024	tmrswrr
Med.	Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution	09.07.2024	Christophe de la Fuent...
Med.	WordPress Video Gallery - YouTube Gallery And Vimeo Gallery 2.3.6 SQL Injection	06.07.2024	tmrswrr
Med.	Xhibiter NFT Marketplace 1.10.2 SQL Injection	02.07.2024	Sohel yousef
Med.	Carbon Forum 5.9.0 Cross Site Request Forgery / SQL Injection	24.06.2024	bRpsd
Med.	AEGON LIFE 1.0 SQL Injection	15.06.2024	Aslam Anwar Mahimkar
Med.	FengOffice 3.11.1.2 SQL Injection	10.06.2024	Andrey Stoykov
Med.	Online Fire Reporting System OFRS SQL Injection Authentication Bypass	07.06.2024	Diyar Saadi
Med.	Boelter Blue System Management 1.3 SQL Injection	07.06.2024	CBKB
Med.	Online Pizza Ordering System 1.0 SQL Injection	07.06.2024	nu11secur1ty
Med.	BWL Advanced FAQ Manager 2.0.3 SQL Injection	02.06.2024	Ivan Spiridonov
Med.	WordPress XStore Theme 9.3.8 SQL Injection	22.05.2024	Abdualhadi Khalifa
Med.	Chat Bot 1.0 SQL Injection	22.05.2024	nu11secur1ty
Med.	Tenant Limited 1.0 SQL Injection	20.05.2024	nu11secur1ty
Med.	Prison Management System SQL Injection Authentication Bypass	13.05.2024	Sanjay Singh
Med.	SOPlanning 1.52.00 SQL Injection	04.05.2024	liquidsky
Med.	FortiNet FortiClient EMS 7.2.2 / 7.0.10 SQL Injection / Remote Code Execution	25.04.2024	Spencer McIntyre
Med.	Centreon 23.10-1.el8 SQL Injection	16.04.2024	Cody Sixteen
Med.	AMPLE BILLS 0.1 SQL injection	15.04.2024	nu11secur1ty
Med.	Moodle 3.10.1 SQL Injection	15.04.2024	Julio Ángel Ferrari
Med.	UP-RESULT 0.1 2024 SQL Injection	08.04.2024	nu11secur1ty
Med.	Daily Expense Manager 1.0 SQL Injection	08.04.2024	Stefan Hesselman
Med.	Human Resource Management System 2024 1.0 SQL Injection	06.04.2024	nu11secur1ty
Med.	Purei CMS 1.0 SQL Injection	30.03.2024	Number 7
Med.	MobileShop master - SQL Injection Vuln.	26.03.2024	HAZIM ARBAŞ
Med.	CSZCMS v1.3.0 SQL Injection (Authenticated)	20.03.2024	Abdulaziz Almetairy
Med.	Human Resource Management System 1.0 SQL Injection	13.03.2024	Srikar
Med.	WordPress Hide My WP SQL Injection	11.03.2024	Xenofon Vassilakopoulo...
Med.	Enrollment System v1.0 SQL Injection	03.03.2024	Gnanaraj Mauviel
Med.	Membership Management System 1.0 SQL Injection	01.03.2024	SoSPiro
Med.	WP Fastest Cache 1.2.2 Unauthenticated SQL Injection	29.02.2024	Meryem Taşkın
Med.	Blood Bank 1.0 SQL Injection	28.02.2024	Ersin Erenler
Med.	WordPress WP Fastest Cache 1.2.2 SQL Injection	28.02.2024	Meryem Taskin
Med.	Simple Inventory Management System v1.0 email SQL Injection	27.02.2024	SoSPiro
Med.	Fuelflow 1.0 SQL Injection	25.02.2024	nu11secur1ty
Med.	Cacti pollers.php SQL Injection / Remote Code Execution	07.02.2024	Christophe de la Fuent...
Med.	Bank Locker Management System SQL Injection	02.02.2024	SoSPiro
High	xbtitFM 4.1.18 SQL Injection / Shell Upload / Traversal	22.01.2024	Who cares anyway
Med.	WordPress RSVPMaker 9.3.2 SQL Injection	17.01.2024	Amirhossein Bahramizad...
Med.	Copyright Loan Management System 2024 1.0 SQL Injection	13.01.2024	nu11secur1ty
Med.	AdvantechWeb/SCADA 9.1.5U SQL Injection	10.01.2024	Cody Sixteen
High	Hospital Management System 4.0 XSS / Shell Upload / SQL Injection	24.12.2023	Louise Ng
Med.	GilaCMS 1.15.4 SQL Injection	24.12.2023	Louise Ng
Low	Webnink - sql injection Vulnerability	08.11.2023	nabeghehtech
Med.	WordPress AI ChatBot 4.8.9 SQL Injection / Traversal / File Deletion	27.10.2023	Marco Wotschka
Med.	NLB mKlik Makedonija 3.3.12 SQL Injection	16.10.2023	Neurogenesia
Med.	WordPress WP ERP 1.12.2 SQL Injection	16.10.2023	Arvandy
Med.	ChurchCRM 4.5.4 SQL Injection	16.10.2023	Arvandy
Med.	Dawa Pharma 1.0-2022 SQL Injection	14.10.2023	nu11secur1ty
Med.	Smart School 6.4.1 SQL Injection	11.10.2023	CraCkEr
Med.	Academy LMS 6.2 SQL Injection	20.09.2023	CraCkEr
Med.	Taskhub 2.8.7 SQL Injection	20.09.2023	CraCkEr
Med.	WordPress Slimstat Analytics 5.0.9 Cross Site Scripting / SQL Injection	13.09.2023	Lana Codes
Med.	Shuttle Booking Software 1.0 SQL Injection	13.09.2023	nu11secur1ty
Med.	Equipment Rental Script 1.0 SQL Injection	13.09.2023	nu11secur1ty
Med.	Meeting Room Booking System 1.0 SQL Injection	10.09.2023	nu11secur1ty
High	Online ID Generator 1.0 SQL Injection / Shell Upload	31.08.2023	nu11secur1ty
Med.	Business Directory Script 3.2 SQL Injection	26.08.2023	nu11secur1ty
Med.	User Registration And Login And User Management System 3.0 SQL Injection	24.08.2023	Ashutosh Singh Umath
Med.	Global Multi School Management System Express 1.0 SQL Injection	23.08.2023	Ahmet Umit Bayram
Med.	Color Prediction Game 1.0 SQL Injection	23.08.2023	Ahmet Umit Bayram
Med.	OVOO Movie Portal CMS 3.3.3 SQL Injection	23.08.2023	Ahmet Umit Bayram
Med.	Online Diagnostic Lab Management 1.0 SQL Injection	01.08.2023	nu11secur1ty
Med.	Hikvision Hybrid SAN Ds-a71024 SQL Injection	21.07.2023	Thurein Soe
Med.	Faculty Evaluation System v1.0 SQL Injection	21.07.2023	Andrey Stoykov
Med.	Wifi Soft Unibox Administration 3.0 / 3.1 SQL Injection	21.07.2023	Ansh Jain
Med.	CMS SAUDI SOFTECH 5.0.2 SQL Injection	21.07.2023	indoushka
Med.	Groomify v1.0 SQL Injection	06.07.2023	Ahmet Ümit BAYRAM
Med.	WordPress WP AutoComplete Search 1.0.4 SQL Injection	05.07.2023	Matin Nouriyan
Med.	Beauty Salon Management System 1.0 SQL Injection	05.07.2023	Fatih Nacar
Med.	SPIP 4.2.3 SQL Injection	30.06.2023	nu11secur1ty
Med.	MOVEit SQL Injection	25.06.2023	bwatters-r7
Med.	SCRMS 2023-05-27 1.0 Multiple SQL Injection	22.06.2023	nu11secur1ty
Med.	ACJWEB DESIGNER 1.0 SQL Injection	22.06.2023	indoushka
Med.	Expert Job Portal Management System 1.0 SQL Injection	07.06.2023	CraCkEr
Med.	PrinterLogic Build 1.0.757 XSS / SQL Injection / Authentication Bypass	30.05.2023	Nadeem Salim
Med.	Stackposts Social Marketing Tool v1.0 SQL Injection	27.05.2023	Ahmet Ümit BAYRAM
Med.	Quicklancer v1.0 SQL Injection	27.05.2023	Ahmet Ümit BAYRAM
Med.	Smart School 1.0 SQL Injection	24.05.2023	Ahmet Umit Bayram
Med.	LeadPro CRM 1.0 SQL Injection	24.05.2023	Ahmet Umit Bayram
Med.	Service Provider Management System v1.0 SQL Injection	24.05.2023	Ashik Kunjumon
Med.	GaanaGawaana Music Platform PHP Script 1.0 Cross Site Scripting / SQL Injection	21.05.2023	nu11secur1ty
Med.	GaanaGawaana 1.0 SQL Injection	11.05.2023	CraCkEr
Med.	VOTAB Voting Quiz PHP Script 1.0 SQL Injection	10.05.2023	CraCkEr
Med.	Found Information System 1.0 SQL Injection	08.05.2023	nu11secur1ty
Med.	AC Repair And Services 1.0 SQL Injection	03.05.2023	nu11secur1ty
Med.	ChurchCRM 4.5.3 SQL Injection	03.05.2023	Iyaad Luqman K
Med.	Piwigo 13.5.0 SQL Injection	30.04.2023	Rodolfo Tavares
Med.	Chitor-CMS 1.1.2 SQL Injection	21.04.2023	msd0pe
Med.	NotrinosERP 0.7 SQL Injection	10.04.2023	Arvandy
Med.	ChurchCRM 4.5.1 SQL Injection	10.04.2023	Arvandy
Med.	Intern Record System 1.0 SQL Injection	06.04.2023	Hamdi Sevben
Med.	Dreamer CMS 4.0.0 SQL Injection	02.04.2023	lvren
Med.	EQ Enterprise Management System 2.2.0 SQL Injection	02.04.2023	TLF
Med.	Senayan Library Management System v9.0.0 SQL Injection	02.04.2023	nu11secur1ty
Med.	WebTareas 2.4 SQL Injection (Unauthorised)	30.03.2023	Hubert Wojciechowski
Med.	101+ News Portal 1.0 SQL Injection	22.03.2023	Abdulhakim Oner
Med.	Yoga Class Registration 1.0 SQL Injection	22.03.2023	nu11secur1ty

---

CVEMAP Search Results

CVE

Details

Description

2024-07-26

	CVE-2024-7118	Updating...	A vulnerability classified as critical was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected by this vulnerability is an unknown functionality of the file /department_viewmore.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The identifier VDB-272449 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-7117	Updating...	A vulnerability classified as critical has been found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected is an unknown function of the file /shift_viewmore.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-272448. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-7116	Updating...	A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been rated as critical. This issue affects some unknown processing of the file /branch_viewmore.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-272447. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-7115	Updating...	A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been declared as critical. This vulnerability affects unknown code of the file /designation_viewmore.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-272446 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-7114	Updating...	A vulnerability was found in Tianchoy Blog up to 1.8.8. It has been classified as critical. This affects an unknown part of the file /so.php. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272445 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-7119	Updating...	A vulnerability, which was classified as critical, has been found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected by this issue is some unknown functionality of the file /employee_viewmore.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-272450 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-40689	Updating...	IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. IBM X-Force ID: 297719.

2024-07-25

CVE-2024-7101

Updating...

A vulnerability, which was classified as critical, has been found in ForIP Tecnologia Administra?�??o PABX 1.x. This issue affects some unknown processing of the file /login of the component Authentication Form. The manipulation of the argument usuario leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272423. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

2024-07-24

	CVE-2024-7069	Updating...	A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects some unknown processing of the file /employee_gatepass/classes/Master.php?f=delete_department. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272351.
	CVE-2024-7081	Updating...	A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file expcatadd.php. The manipulation of the argument title leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-272366 is the identifier assigned to this vulnerability.

 

---

Copyright 2024, cxsecurity.com