41 matches found
EUVD-2001-1448
Malware in sbrugna...
CVE-2025-9699
A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a remote location. The exploit is now...
CVE-2025-9699: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a remote location. The exploit is now...
CVE-2025-6095 codesiddhant Jasmin Ransomware checklogin.php sql injection
A vulnerability, which was classified as critical, was found in codesiddhant Jasmin Ransomware 1.0.1. Affected is an unknown function of the file /checklogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2025-6095: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in codesiddhant Jasmin Ransomware 1.0.1. Affected is an unknown function of the file /checklogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2023-43470
SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...
CVE-2023-43470
SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...
Online Voting System SQL Injection Vulnerability
Online Voting System is an online voting system by Carlo Montero Personal Developer. A security vulnerability exists in Online Voting System version v.1.0 that could allow a remote attacker to execute arbitrary code via the checklogin.php component...
CVE-2023-43470
SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...
PT-2023-28835 · Unknown · Janobe Online Voting System
Name of the Vulnerable Software and Affected Versions: janobe Online Voting System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the checklogin.php component. This is due to a SQL injection vulnerability. Recommendations: For janobe Online Voting System...
CVE-2023-43470: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...
Thrive Smart Home 1.1 - Authentication Bypass
Exploit: Thrive Smart Home 1.1 - Authentication Bypass Date: 2019-12-30 Author: LiquidWorm Vendor: Thrive Product web page: http://www.thrivesmarthomes.com Affected version: 1.1 Tested on: Apache/2.4.41 centos OpenSSL/1.0.2k-fips Advisory ID: ZSL-2019-5554 Advisory URL:...
Nominas 0.27 - username SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Nominas 0.27 - 'username' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://arixolab.com/proyecto.html Software Link: https://netix.dl.sourceforge.net/project/nominascrm/Nominas%20v0.27.tar.gz Version: 0.27...
hillhouseproject.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-634826 Description| Value ---|--- Affected Website:| hillhouseproject.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PHP Address Book Cross Site Scripting / SQL Injection
Exploit Title : PHP Address Book SQL Injection and xss vulnerability Author : Manish Kishan Tanwar Home page Link : http://sourceforge.net/projects/php-addressbook/ Date : 01/01/2015 Discovered at : IndiShell Lab Love to : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,jagriti,Kishan Singh and...
PHP Address Book - '/addressbook/register/checklogin.php?Username' SQL Injection
source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...
Sql injection
Multiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allow remote attackers to execute arbitrary SQL commands via the 1 myusername username and 2 password parameters. NOTE: some of these details are obtained from third part...
Vortex Portal 1.0.42 - Remote File Inclusion
Vortex Portal 1.0.42 RFI ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : Vortex Portal 1.0.42 ---------- Download : http://www.igamingcms.com/legacy-software/VortexPortal1.0.42.zip ---------- Vuln Type: RFI ---------- Registerglobals: ON -----------------...
vBlog / C12 0.1 (cfgProgDir) Remote File Include Vulnerabilities
WwW.Deltahacking.NeT Priv8 Site WwW.Deltahacking.Ir Public Site Portal Name :Vortex Blog AKA vBlog Class = Remote File Inclusion ; Download =http://switch.dl.sourceforge.net/sourceforge/c12/C12a0.1nonfunc.zip Found by = Dr.Pantagon [email protected]...
CVE-2001-1468
PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code...