CWE-89

CVE-2022-43135

February 23, 2023 by godfreyd94

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php.

CVE-2022-43162

February 23, 2023 by godfreyd94

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/view_test.php.

CVE-2022-43163

February 23, 2023 by godfreyd94

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/view_client.php.

CVE-2022-43168

February 23, 2023 by godfreyd94

Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id parameter.

CVE-2022-43179

February 23, 2023 by godfreyd94

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manage_user&id=.

CVE-2022-43212

February 23, 2023 by godfreyd94

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php.