CWE-89

CVE-2022-48114

February 23, 2023 by godfreyd94

RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable.

SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php.

CVE-2022-48152

February 23, 2023 by godfreyd94

SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php.

CVE-2022-48011

February 23, 2023 by godfreyd94

Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function.

CVE-2022-47770

February 23, 2023 by godfreyd94

Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection.

CVE-2022-47780

February 23, 2023 by godfreyd94

SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter.