Vendor

Oretnom23

2 briefs RSS

SQL Injection Vulnerability in Purchase Order Management System (POMS)

Purchase Order Management System (POMS) version 1.0 is vulnerable to unauthenticated SQL injection via the password parameter, allowing for exfiltration or out-of-band communication via the MySQL load_file function.

Purchase Order Management System nu11secur1ty

1r 1t 1i 2w ago

critical advisory

Critical SQL Injection in Customer Support System 1.0

1 rule 1 TTP 1 CVE

CVE-2023-49970 is a critical SQL injection vulnerability in the Customer Support System version 1.0 allowing unauthenticated attackers to execute arbitrary database commands via the 'subject' parameter.

Customer Support System web-vulnerability sql-injection cve

1r 1t 1c Aug 31, 2026