PT-2022-10656

Name of the Vulnerable Software and Affected Versions FusionPBX version 4.5.26 Description A Cross Site Scripting XSS issue allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized path parameter in the "resources/login.php" endpoint. Recommendations For...

CVE-2021-37524: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...

CVE-2022-33119

NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting XSS vulnerability via login.php...

Cross site scripting

NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting XSS vulnerability via login.php...

CVE-2022-33119

NUUO NVRsolo Video Recorder v03.06.02 is affected by a reflected cross-site scripting (XSS) vulnerability in login.php. The issue allows an attacker to inject and execute arbitrary script in the victim’s browser, with potential impact including session hijacking, defacement, or leakage of sensiti...

CVE-2022-33119

NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting XSS vulnerability via login.php...

PT-2022-21698

Name of the Vulnerable Software and Affected Versions NUUO Network Video Recorder NVRsolo version 03.06.02 Description A reflected cross-site scripting XSS issue was found in the login.php file. This issue can be exploited via the "login.php" endpoint. The estimated number of potentially affected...

CVE-2022-33119: Improper Neutralization of Input During Web Page Generation

NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting XSS vulnerability via login.php...

Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF

The plugin does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack document.getElementById"test".submit;...

CVE-2022-2086

A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...

CVE-2022-2086 SourceCodester Bank Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...

CVE-2022-2086 SourceCodester Bank Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...

CVE-2022-2086: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...

PT-2022-14847

Name of the Vulnerable Software and Affected Versions SourceCodester Bank Management System version 1.0 Description A critical issue has been found in the login functionality. The manipulation of the password argument with a specific input leads to SQL injection. The attack can be launched...

Home Clean Services Management System SQL Injection Vulnerability

Home Clean Services Management System is a home cleaning service system. version 1.0 of Home Clean Services Management System is vulnerable to a SQL injection issue in login.php. An attacker could exploit this vulnerability to obtain sensitive database information...

CVE-2022-31339: Improper Neutralization of Special Elements used in an SQL Command

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php...

PT-2022-20696

Name of the Vulnerable Software and Affected Versions Simple Inventory System version 1.0 Description The issue allows for SQL Injection via the "/inventory/login.php" API endpoint. Recommendations For Simple Inventory System version 1.0, consider disabling the login functionality in...

Sql injection

A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...

CVE-2022-1839

CVE-2022-1839 covers a SQL injection in Home Clean Services Management System 1.0, specifically in the login.php file. The vulnerability arises from manipulating the email parameter (example payload: admin%'//AND/ /(SELECT//5383/ /FROM//(SELECT(SLEEP(2)))JPeh)/ /AND/**/'frfq%'='frfq) which leads ...

CVE-2022-1839 Home Clean Services Management System login.php sql injection

A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...