CVE-2017-20197

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

CVE-2017-20197: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

PT-2025-15689

Name of the Vulnerable Software and Affected Versions: propanetank Roommate-Bill-Tracking versions up to 288437f658fc9ee7d4b92a9da12557024d8bc55c Description: A critical issue has been found in the code of the /includes/login.php file. The manipulation of the Username argument leads to SQL...

PT-2023-29359

Name of the Vulnerable Software and Affected Versions Online Bus Booking System version 1.0 Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the username parameter of the "includes/login.php" resource does not validate the characters received,...

CVE-2023-45018: Improper Neutralization of Special Elements used in an SQL Command

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2022-28060

SQL Injection vulnerability in Victor CMS v1.0, via the username parameter to /includes/login.php...

PT-2022-18787

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue is related to a SQL Injection vulnerability. It can be exploited via the user name parameter to the "/includes/login.php" API endpoint. Recommendations For Victor CMS version 1.0, consider restricti...

CVE-2022-28060: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Victor CMS v1.0, via the username parameter to /includes/login.php...

CVE-2010-0988: Improper Control of Generation of Code

Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow 1 remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and...

CVE-2007-0531: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/login.php in FreeWebShop 2.2.3 and 2.2.4 before 20070123 allows remote attackers to execute arbitrary PHP code via a URL in the langfile parameter...