Skip to content
OpenAdvisories

Vendor

Wecodex

7 known vulnerabilities.

Products

Wecodex Hotel CMS 1 Library CMS 1 Shipping System CMS 1 SAT CFDI 1 Online Store System CMS 1 School Management System CMS 1 Wecodex Restaurant CMS 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.2
    CVE-2018-25204

    Library CMS 1.0 SQL Injection via admin login

    Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can send POST requests to the admin login endpoint with boolean-based blind …

    Wecodex Library CMS
  • High 8.2
    CVE-2018-25203

    Online Store System CMS 1.0 SQL Injection via clientaccess

    Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter. Attackers can send POST requests to index.php with the action=clientacc…

    Wecodex Online Store System CMS
  • High 8.2
    CVE-2018-25202

    SAT CFDI 3.3 SQL Injection via signIn endpoint

    SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id' parameter in the signIn endpoint. Attackers can submit POST requests with boolean-based blind, stacked queries, or…

    Wecodex SAT CFDI
  • High 7.1
    CVE-2018-25201

    School Management System CMS 1.0 Admin Login SQL Injection

    School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit malicious payloads using boolea…

    Wecodex School Management System CMS
  • High 8.2
    CVE-2018-25185

    Wecodex Restaurant CMS 1.0 SQL Injection via Login

    Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious…

    Wecodex Wecodex Restaurant CMS
  • High 8.2
    CVE-2018-25195

    Wecodex Hotel CMS 1.0 SQL Injection via Admin Login

    Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code. Attackers can submit malicious SQL payloads through the username parameter in …

    Wecodex Wecodex Hotel CMS
  • High 8.2
    CVE-2018-25183

    Shipping System CMS 1.0 SQL Injection via admin login

    Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit malicious SQL payloads using boolean-based blind techniqu…

    Wecodex Shipping System CMS