CWE-89

CVE-2022-36725

February 23, 2023 by godfreyd94

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /student/dele.php.

February 23, 2023 by godfreyd94

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php.

February 23, 2023 by godfreyd94

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /staff/delstu.php.

February 23, 2023 by godfreyd94

jizhicms v2.3.1 has SQL injection in the background.

February 23, 2023 by godfreyd94

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /admin/login.php.

February 23, 2023 by godfreyd94

Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function.