Vendor CVEs
Oretnom23
All CVEs
1,064 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-31956 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/manage_report.php?id=. | ||
| CVE-2022-31953 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/view_report.php?id=. | ||
| CVE-2022-31952 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Rescue Dispatch Management System v1.0 is vulnerable to SQL injection via /rdms/classes/Master.php?f=delete_incident. | ||
| CVE-2022-31951 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_respondent_type. | ||
| CVE-2022-31948 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_report. | ||
| CVE-2022-31946 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_team. | ||
| CVE-2022-31354 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get_vehicle_service. | ||
| CVE-2022-31353 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/view_service.php?id=. | ||
| CVE-2022-31352 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manage_service.php?id=. | ||
| CVE-2022-31351 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manage_price.php?id=. | ||
| CVE-2022-31350 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/manage_vehicle.php?id=. | ||
| CVE-2022-31348 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update_status.php?id=. | ||
| CVE-2022-31347 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. | ||
| CVE-2022-31346 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service. | ||
| CVE-2022-31345 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage_user&id=. | ||
| CVE-2022-31344 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_booking. | ||
| CVE-2022-31343 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view_details&id=. | ||
| CVE-2022-30797 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php. | ||
| CVE-2022-30423 | Cri | 0.64 | 9.8 | 0.02 | Jun 2, 2022 | Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information. | ||
| CVE-2022-30495 | Cri | 0.64 | 9.8 | 0.01 | May 26, 2022 | In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation) | ||
| CVE-2022-30493 | Cri | 0.64 | 9.8 | 0.02 | May 26, 2022 | In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin access(privilege escalation). | ||
| CVE-2022-29650 | Cri | 0.64 | 9.8 | 0.01 | May 25, 2022 | Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php. | ||
| CVE-2022-30054 | Cri | 0.64 | 9.8 | 0.01 | May 17, 2022 | In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks. | ||
| CVE-2022-30053 | Cri | 0.64 | 9.8 | 0.01 | May 17, 2022 | In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks. | ||
| CVE-2022-30413 | Cri | 0.64 | 9.8 | 0.01 | May 13, 2022 | Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=delete_application. | ||
| CVE-2022-30407 | Cri | 0.64 | 9.8 | 0.01 | May 13, 2022 | Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manage_user.php?id=. | ||
| CVE-2022-30395 | Cri | 0.64 | 9.8 | 0.01 | May 13, 2022 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart. | ||
| CVE-2022-30392 | Cri | 0.64 | 9.8 | 0.01 | May 13, 2022 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category. | ||
| CVE-2022-30391 | Cri | 0.64 | 9.8 | 0.01 | May 13, 2022 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category. | ||
| CVE-2022-30387 | Cri | 0.64 | 9.8 | 0.01 | May 13, 2022 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order. | ||
| CVE-2022-30386 | Cri | 0.64 | 9.8 | 0.01 | May 13, 2022 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured. | ||
| CVE-2022-30385 | Cri | 0.64 | 9.8 | 0.01 | May 13, 2022 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order. | ||
| CVE-2022-30384 | Cri | 0.64 | 9.8 | 0.01 | May 13, 2022 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory. | ||
| CVE-2022-30370 | Cri | 0.64 | 9.8 | 0.01 | May 13, 2022 | Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo_type. | ||
| CVE-2022-29746 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete. | ||
| CVE-2022-29745 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction. | ||
| CVE-2022-29741 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee. | ||
| CVE-2022-29739 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=. | ||
| CVE-2022-29738 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id. | ||
| CVE-2022-29995 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=. | ||
| CVE-2022-29994 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=. | ||
| CVE-2022-29993 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=. | ||
| CVE-2022-29992 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=. | ||
| CVE-2022-29990 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=. | ||
| CVE-2022-29989 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking. | ||
| CVE-2022-29988 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete. | ||
| CVE-2022-29987 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=. | ||
| CVE-2022-29986 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility. | ||
| CVE-2022-29985 | Cri | 0.64 | 9.8 | 0.01 | May 12, 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category. | ||
| CVE-2022-29984 | Cri | 0.64 | 9.8 | 0.02 | May 12, 2022 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=. |
- risk 0.64cvss 9.8epss 0.01
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/manage_report.php?id=.
- risk 0.64cvss 9.8epss 0.01
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/view_report.php?id=.
- risk 0.64cvss 9.8epss 0.01
Rescue Dispatch Management System v1.0 is vulnerable to SQL injection via /rdms/classes/Master.php?f=delete_incident.
- risk 0.64cvss 9.8epss 0.01
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_respondent_type.
- risk 0.64cvss 9.8epss 0.01
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_report.
- risk 0.64cvss 9.8epss 0.01
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_team.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get_vehicle_service.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/view_service.php?id=.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manage_service.php?id=.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manage_price.php?id=.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/manage_vehicle.php?id=.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update_status.php?id=.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage_user&id=.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_booking.
- risk 0.64cvss 9.8epss 0.01
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view_details&id=.
- risk 0.64cvss 9.8epss 0.01
Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.
- risk 0.64cvss 9.8epss 0.02
Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.
- risk 0.64cvss 9.8epss 0.01
In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation)
- risk 0.64cvss 9.8epss 0.02
In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin access(privilege escalation).
- risk 0.64cvss 9.8epss 0.01
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php.
- risk 0.64cvss 9.8epss 0.01
In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks.
- risk 0.64cvss 9.8epss 0.01
In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks.
- risk 0.64cvss 9.8epss 0.01
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=delete_application.
- risk 0.64cvss 9.8epss 0.01
Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manage_user.php?id=.
- risk 0.64cvss 9.8epss 0.01
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart.
- risk 0.64cvss 9.8epss 0.01
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category.
- risk 0.64cvss 9.8epss 0.01
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category.
- risk 0.64cvss 9.8epss 0.01
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order.
- risk 0.64cvss 9.8epss 0.01
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.
- risk 0.64cvss 9.8epss 0.01
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order.
- risk 0.64cvss 9.8epss 0.01
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory.
- risk 0.64cvss 9.8epss 0.01
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo_type.
- risk 0.64cvss 9.8epss 0.01
Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.
- risk 0.64cvss 9.8epss 0.01
Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction.
- risk 0.64cvss 9.8epss 0.01
Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee.
- risk 0.64cvss 9.8epss 0.01
Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=.
- risk 0.64cvss 9.8epss 0.01
Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id.
- risk 0.64cvss 9.8epss 0.01
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=.
- risk 0.64cvss 9.8epss 0.01
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=.
- risk 0.64cvss 9.8epss 0.01
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=.
- risk 0.64cvss 9.8epss 0.01
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=.
- risk 0.64cvss 9.8epss 0.01
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=.
- risk 0.64cvss 9.8epss 0.01
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.
- risk 0.64cvss 9.8epss 0.01
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete.
- risk 0.64cvss 9.8epss 0.01
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.
- risk 0.64cvss 9.8epss 0.01
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility.
- risk 0.64cvss 9.8epss 0.01
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category.
- risk 0.64cvss 9.8epss 0.02
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.
Page 3 of 22