CWE-89

Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via “Username: admin’# && Password: (Write Something)”.

PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via “Username: admin’# && Password: (Write Something)”.

A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database.

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the ‘team.php,player.php,club.php’ id parameter.

Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the ‘content.php’ id parameter.

SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter ” offerta.php”