4 matches found
CVE-2025-6154: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /includes/login.inc.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit...
CVE-2021-4259: Use of Wrong Operator in String Comparison
A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the function authHttpDigest of the file includes/login.inc.php. The manipulation of the argument response leads to use of wrong operator in string comparison. Upgrading to version 1.16.2 i...
CVE-2021-4259
A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the function authHttpDigest of the file includes/login.inc.php. The manipulation of the argument response leads to use of wrong operator in string comparison. Upgrading to version 1.16.2 i...
CVE-2008-6435: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 langhome, 2 langadminmenu, and 3 langadminmenupageoverview parameters to cms/includes/header.inc.php; and the 4 langloginusername and 5 langloginpassword...