Church Management System version 1.0 suffers from a remote SQL injection vulnerability. Original discovery of SQL injection in this version is attributed to Murat Demirci in July of 2021.
445f577a4e7298a5becd39ec3d3cc6c3Budget and Expense Tracker System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
40bed83356597733c7fd84b5cb6b2ee0Library Management System version 1.0 suffers from a remote blind time-based SQL injection vulnerability.
d1b3bec04564901a9e4024f4c99cae47Simple Attendance System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
e095fbb19fec3f896a193398a75dacadSupport Board version 3.3.3 suffers from a remote SQL injection vulnerability.
2522a4c70f34263689e5aca25398a9e4AHSS-PHP version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities.
00674176fa93d01b22d17bb2c4952741Apartment Visitor Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for a shell upload.
2ea182061b9cf4d7e75a879b4e350ea6Men Salon Management System version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities.
7250e4f4732c81d5b68cd71a2aa7e396POMS-PHP version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
bd8eafbd3e81ab90a2981a83f111f34cWordPress Survey and Poll plugin version 1.5.7.3 suffers from a remote SQL injection vulnerability.
99817a48711d4060322930fec52027cfOnline Learning System version 2 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
013bcdc529b93f597062a770fe2ee2b2sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.
32819398c46317bb918049666fad4e8fOpenSIS Community version 8.0 suffers from a remote SQL injection vulnerability.
f6ec06f5199d921c579c4ca3d1ba53d8Traffic Offense Management System version 1.0 remote code execution exploit that leverages a remote SQL vulnerability.
b273c6fcac7e557727fa0ed573991ad0COVID-19 Contact Tracing System web app with QR Code Scanning version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
f33613a39be7abe868a0a2dd4d91f0ecOnline Leave Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
75edb87267a1be86c4de86ef35642ddaShip Ferry Ticket Reservation System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
131358c58697ad6558b4d36e32ececbcBus Pass Management System version 1.0 suffers from a remote SQL injection vulnerability.
cfdfe1a1baab9ad28e9966c12a5dbd74Simple Phone Book/Directory version 1.0 suffers from a remote SQL injection vulnerability.
d80edd75c924a4e0965f578f2f98720aOnline Traffic Offense Management System version 1.0 suffers from a remote SQL injection vulnerability.
2f9acc8a8b3a0b91f178fb6d6df96192Laundry Booking Management System version 1.0 suffers from a remote SQL injection vulnerability.
fd9fd271223abcc0085b23c8cabafcfcCharity Management System CMS version 1.0 suffers from code execution, cross site scripting, and remote SQL injection vulnerabilities.
a020398e0e0353cb8a5a49bdbde88373Crime Records Management System version 1.0 suffers from a remote SQL injection vulnerability.
abc63d0985d59978216c036361a04b2cCOVID-19 Testing Management System version 1.0 suffers from multiple remote SQL injection vulnerabilities. This is a variant of the original discovery of SQL injection in this version as discovered by Rohit Burke in May of 2021.
192880a29891c09a924e04956993d489COMMAX Smart Home IoT Control System CDP-1020n suffers from a remote SQL injection vulnerability that allows for authentication bypass.
5566bcf92f20e034df8e647a0947dd43
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed