CWE-89

CVE-2022-25505

February 23, 2023 by godfreyd94

Taocms v3.0.2 was discovered to contain a SQL injection vulnerability via the id parameter in includeModelCategory.php.

February 23, 2023 by godfreyd94

FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser.

February 23, 2023 by godfreyd94

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java.

February 23, 2023 by godfreyd94

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter.

February 23, 2023 by godfreyd94

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php.

February 23, 2023 by godfreyd94

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection vulnerability via the search parameter.