Show filters
26 Total Results
Displaying 11-20 of 26
Sort by:
Attacker Value
Unknown

CVE-2022-43227

Disclosure Date: November 02, 2022 (last updated February 24, 2025)
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/view_appointment.
Attacker Value
Unknown

CVE-2022-43226

Disclosure Date: November 02, 2022 (last updated February 24, 2025)
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/view_appointment.
Attacker Value
Unknown

CVE-2022-43126

Disclosure Date: November 01, 2022 (last updated February 24, 2025)
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/manage_test.php.
Attacker Value
Unknown

CVE-2022-43127

Disclosure Date: November 01, 2022 (last updated February 24, 2025)
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/update_status.php.
Attacker Value
Unknown

CVE-2022-43124

Disclosure Date: November 01, 2022 (last updated February 24, 2025)
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user.
Attacker Value
Unknown

CVE-2022-43125

Disclosure Date: November 01, 2022 (last updated February 24, 2025)
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manage_appointment.php.
Attacker Value
Unknown

CVE-2022-42064

Disclosure Date: October 14, 2022 (last updated February 24, 2025)
Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell.
Attacker Value
Unknown

CVE-2022-41534

Disclosure Date: October 13, 2022 (last updated February 24, 2025)
Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/createOrder.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Attacker Value
Unknown

CVE-2022-41533

Disclosure Date: October 13, 2022 (last updated February 24, 2025)
Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Attacker Value
Unknown

CVE-2022-42074

Disclosure Date: October 07, 2022 (last updated February 24, 2025)
Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=.