CWE-89

CVE-2022-35175

February 23, 2023 by godfreyd94

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /blotter/blotter.php.

CVE-2022-35193

February 23, 2023 by godfreyd94

TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php.

CVE-2022-35115

February 23, 2023 by godfreyd94

IceWarp WebClient DC2 – Update 2 Build 9 (13.0.2.9) was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php.

CVE-2022-35121

February 23, 2023 by godfreyd94

Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java.

CVE-2022-35148

February 23, 2023 by godfreyd94

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html.

CVE-2022-35154

February 23, 2023 by godfreyd94

Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter.