CVE Vulnerability

CWE-89

CVE-2018-18805

by

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.

CVE-2018-18806

by

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb.

CVE-2018-18755

by

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/update user_id parameter.

CVE-2018-18757

by

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18758.

CVE-2018-18758

by

Open Faculty Evaluation System 7 for PHP 7 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18757.

CVE-2018-18761

by

SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.