CVE-2023-1850: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The explo...

CVE-2023-1352: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. This issue affects some unknown processing of the file /admin/login.php. The manipulation of the argument txtusername/txtpassword leads to...

CVE-2022-36581

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

CVE-2022-2727

A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument adminemail/adminpass leads to sql injection. The attack can be...

Sql injection

A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument adminemail/adminpass leads to sql injection. The attack can be...

CVE-2022-2727: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument adminemail/adminpass leads to sql injection. The attack can be...

PT-2022-14156

Name of the Vulnerable Software and Affected Versions Home Clean Services Management System version 1.0 Description A critical issue has been discovered, affecting an unknown part of the admin/login.php component. The manipulation of the username argument with a specific input leads to SQL...

CVE-2022-1838: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Home Clean Services Management System 1.0. This affects an unknown part of admin/login.php. The manipulation of the argument username with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP5JPeh//AND//'frfq%'='frfq leads to sql...

CVE-2022-28531

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...

PT-2022-19069

Name of the Vulnerable Software and Affected Versions Sourcecodester Covid-19 Directory on Vaccination System version 1.0 Description The system is susceptible to SQL Injection attacks through the txtusername field, also known as the Username field, located in the admin/login.php endpoint. This...

CVE-2022-28531: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...

PT-2022-16484

Name of the Vulnerable Software and Affected Versions DouPHP version 1.6 Release 20220121 Description The issue affects the background of DouPHP through the "/admin/login.php" API endpoint, allowing for Cross Site Scripting XSS attacks, which can lead to JavaScript code execution. Recommendations...

CVE-2022-24131: Improper Neutralization of Input During Web Page Generation

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting XSS through /admin/login.php in the background, which will lead to JavaScript code execution...

CVE-2022-24600: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements...

PT-2022-16748

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue allows for SQL Injection through the /admin/login.php endpoint. An attacker can exploit this to log in to the background using SQL injection statements. Recommendations For Luocms version 2.0, consider...

CVE-2022-24223

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

Sql injection

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

CVE-2022-24223

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

CVE-2022-24223

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

CVE-2022-24223: Improper Neutralization of Special Elements used in an SQL Command

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...