PHP - CVE CyberSecurity Database News (Page 234)

Oct 28, 2022 RCE Exploit SQL PHP Sem-cms Semcms

CVE-2021-38734 - How an SQL Injection in SEMCMS SHOP v1.1’s Ant_Menu.php Opens the Door for Attackers

--- SEMCMS SHOP is a popular e-commerce CMS solution, especially in certain markets needing a light and manageable online store. In September 2021, a dangerous

Oct 28, 2022 Exploit SQL PHP

CVE-2021-35387 - SQL Injection in Hospital Management System v4. (view-patient.php) Explained

When it comes to healthcare software, security should be a top priority. Unfortunately, some systems have serious flaws that can put sensitive information at risk.

Oct 28, 2022 Exploit SQL PHP

CVE-2022-43276 - SQL Injection in Canteen Management System v1. via `productId` Parameter

When working with web applications, security flaws like SQL injection can be disastrous. In this article, we’ll break down CVE-2022-43276, a high-severity vulnerability discovered

Oct 28, 2022 RCE Exploit PHP

CVE-2022-43275 - Exploiting Arbitrary File Upload in Canteen Management System v1.

--- CVE-ID: CVE-2022-43275 Vulnerability Type: Arbitrary File Upload Affected Product: Canteen Management System v1. Component: /youthappam/php_action/editProductImage.php Impact: Remote Code Execution (RCE)

Oct 28, 2022 Exploit SQL PHP SourceCodester Web-Based Student Clearance System

CVE-2022-3733 - Critical SQL Injection in SourceCodester Web-Based Student Clearance System (edit-admin.php) — Exploit Guide

In October 2022, a severe vulnerability was discovered in the SourceCodester Web-Based Student Clearance System, specifically affecting the Admin/edit-admin.php file. This flaw has