CWE-89

CVE-2022-36599

February 23, 2023 by godfreyd94

Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.

February 23, 2023 by godfreyd94

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.

February 23, 2023 by godfreyd94

Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.

February 23, 2023 by godfreyd94

Clinic’s Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/update_patient.php.

February 23, 2023 by godfreyd94

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do.

February 23, 2023 by godfreyd94

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php.