CVE-2022-36754 Expense Management System v1.0 had a SQL injection vulnerability in the id parameter.
This can be exploited by hackers to execute arbitrary SQL commands in the application's database. In certain cases, this may lead to the
CVE-2020-22669 a SQL injection vulnerability in Modsecurity OWASP Modsecurity CRS 3.2.0 (PL1)
This issue is rated at a severity level of 2.1 by OWASP and has been assigned the ID of 20164. A attacker can exploit
CVE-2022-36637 The Garage Management System v1.0 had a XSS vulnerability via the brand_name parameter.
An attacker can inject malicious code into the database to steal database credentials, reveal sensitive information, or deploy a malicious plugin to the website. In
CVE-2022-36609 The patient management system v1.0 had a SQL injection vulnerability via the id parameter.
An attacker can exploit the SQL injection flaw to execute arbitrary SQL commands with the privileges of the system user. In addition to the SQL
CVE-2022-36636 The Garage Management System v1.0 SQL injection vulnerability was found at /print.php.
An attacker can inject SQL queries, run arbitrary PHP code, or obtain sensitive information by using the id parameter as an access token. The updated
Episode
00:00:00
00:00:00