CVE-2022-3972

A vulnerability was found in Pingkon HMS-PHP. It has been rated as critical. This issue affects some unknown processing of the file admin/adminlogin.php. The manipulation of the argument uname/pass leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2024-10739

A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/adminpswd as part of String leads to sql injection. The attac...

CVE-2024-10739 code-projects E-Health Care System adminlogin.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/adminpswd as part of String leads to sql injection. The attac...

Sql injection

A vulnerability was found in Pingkon HMS-PHP. It has been rated as critical. This issue affects some unknown processing of the file admin/adminlogin.php. The manipulation of the argument uname/pass leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2022-3972

Summary: CVE-2022-3972 affects Pingkon HMS-PHP and describes a vulnerability in the admin/adminlogin.php handler where manipulation of the uname/pass parameters leads to SQL injection. The issue is exploitable remotely and has had exploits publicly disclosed according to the provided documents. D...

CVE-2022-3972 Pingkon HMS-PHP adminlogin.php sql injection

A vulnerability was found in Pingkon HMS-PHP. It has been rated as critical. This issue affects some unknown processing of the file admin/adminlogin.php. The manipulation of the argument uname/pass leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2022-3972 Pingkon HMS-PHP adminlogin.php sql injection

A vulnerability was found in Pingkon HMS-PHP. It has been rated as critical. This issue affects some unknown processing of the file admin/adminlogin.php. The manipulation of the argument uname/pass leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2022-32093

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php...

CVE-2022-32093

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php...

Sql injection

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php...

CVE-2022-23364

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

Sql injection

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

CVE-2022-23364

HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...

CVE-2022-23364

CVE-2022-23364 affects HMS v1.0 and is described as a SQL injection vulnerability exploitable via the adminlogin.php endpoint. The connected documents corroborate a SQL injection issue in HMS, but do not provide concrete exploit details, affected versions beyond v1.0, or remediation steps. The im...

osCMax 2.5 - adminlogin.php?Username Cross-Site Scripting

osCMax 2.5 - adminlogin.php?Username Cross-Site Scripting source: https://www.securityfocus.com/bid/52886/info osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting thes...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configforuminstalled parameter to 1 forum/adminLogin.php and 2 forum/userLogin.php...

Sql injection

Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2010-0611

CVE-2010-0611 describes multiple SQL injection vulnerabilities in Baal Systems' adminlogin.php (versions 3.8 and earlier). The underlying issue allows remote attackers to inject SQL commands through the username or password parameters, potentially compromising data confidentiality and integrity a...

Baal Systems 3.8 SQL Injection

Baal Systems + Download : http://scripts.ringsworld.com/discussion-boards/baalsystems3-8/ + Vuln Code : adminlogin.php + PoC : BaalSystemspath/adminlogin.php username: ' or' 1=1 Password: ' or' 1=1...

Baal Systems <= 3.8 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + Baal Systems = 3.8 Auth Bypass SQL Injection Vulnerability + Discovered by cr4wl3r cr4wl3r!linuxmail.org + Vuln Code : adminlogin.php ?php include"common.php"; if !empty$POST'password' $username = $POST'username'; $password = $POST'password'; $query = "select...