PT-2022-12180

Name of the Vulnerable Software and Affected Versions Simple College Website version 1.0 Description The issue allows for unauthenticated file upload and remote code execution via UNION-based SQL injection in the username parameter on the "/admin/login.php" API endpoint. Recommendations For Simpl...

CVE-2021-42580: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

CVE-2021-41674: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the useremail parameter in /admin/login.php...

PT-2021-23369

Name of the Vulnerable Software and Affected Versions Sourcecodester E-Negosyo System version 1.0 Description An SQL Injection issue exists via the user email parameter in the "/admin/login.php" API endpoint. This allows for potential exploitation. Recommendations For Sourcecodester E-Negosyo...

Sql injection

Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php...

PT-2021-21625

Name of the Vulnerable Software and Affected Versions Online Student Admission System version 1.0 Description The issue is an unauthenticated SQL injection bypass vulnerability. It affects the /admin/login.php endpoint. Recommendations For Online Student Admission System version 1.0, as a tempora...

CVE-2021-37371: Improper Neutralization of Special Elements used in an SQL Command

Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php...

E-Negosyo System 1.0 SQL Injection Vulnerability

Exploit Title: E-Negosyo System 1.0 - Time-Based Blind SQLi - admin/login.php Exploit Author: Janik Wehrli Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsenordering0.zip Version: 1.0 Category:...

CVE-2020-29214: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.php...

PT-2021-11658

Name of the Vulnerable Software and Affected Versions: SourceCodester Alumni Management System version 1.0 Description: The issue allows a user to inject SQL payload to bypass authentication via the "admin/login.php" endpoint. This can potentially lead to unauthorized access. Recommendations: For...

Sql injection

The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=SQL, index.php?p=rooms&q=SQL, or admin/login.php...

CVE-2018-18800

The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=SQL, index.php?p=rooms&q=SQL, or admin/login.php...

PT-2019-9632

Name of the Vulnerable Software and Affected Versions Tubigan "Welcome to our Resort" version 1.0 Description The issue allows SQL Injection, which can be exploited through specific API endpoints, such as "index.php?p=accomodation&q=SQL", "index.php?p=rooms&q=SQL", or "admin/login.php"...

CVE-2018-18800: Improper Neutralization of Special Elements used in an SQL Command

The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=SQL, index.php?p=rooms&q=SQL, or admin/login.php...

CVE-2019-7660: Improper Neutralization of Input During Web Page Generation

An issue was discovered in PHPMyWind 5.5. The username parameter of the /install/index.php page has a stored Cross-site Scripting XSS vulnerability, as demonstrated by admin/login.php...

CVE-2018-19221

CVE-2018-19221 affects LAOBANCMS 2.0. The vulnerability is a SQL injection via the admin/login.php guanliyuan parameter, as described across multiple connected sources. CVSS metrics from the initial document show an overall high/critical impact (CVSS2: 7.5; CVSS3: 9.8) with network access, no aut...

PT-2018-14877

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue was discovered that allows spoofing of the id and guanliyuan cookies in the /admin/login.php API endpoint. Recommendations For LAOBANCMS version 2.0, as a temporary workaround, consider restricting...

PT-2018-14874

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue was discovered that allows SQL Injection via the guanliyuan parameter in the "admin/login.php" endpoint. Recommendations For LAOBANCMS version 2.0, consider restricting access to the guanliyuan...

CVE-2018-19221: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter...

CVE-2018-19224: Reliance on Cookies without Validation and Integrity Checking

An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies...