CWE-89

CVE-2022-31981

February 23, 2023 by godfreyd94

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/view_team&id=.

CVE-2022-31982

February 23, 2023 by godfreyd94

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/view_request&id=.

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.

CVE-2022-31787

February 23, 2023 by godfreyd94

IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFO

CVE-2022-31788

February 23, 2023 by godfreyd94

IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.

CVE-2022-31856

February 23, 2023 by godfreyd94

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemez_newsletter_email parameter at /index.php.