2584 matches found
CVE-2021-38725
Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...
CVE-2021-38725
CVE-2021-38725 — Fuel CMS 1.5.0 brute-force vulnerability . Affected software is Fuel CMS 1.5.0, with the issue located in the login controller file: fuel/modules/fuel/controllers/Login.php. The connected sources explicitly describe a brute-force vulnerability, and CNVD notes that an attacker can...
CVE-2021-38721: Cross-Site Request Forgery (CSRF)
FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...
CVE-2021-38725: Improper Restriction of Excessive Authentication Attempts
Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...
PT-2021-22277
Name of the Vulnerable Software and Affected Versions Fuel CMS version 1.5.0 Description The issue is related to a brute force vulnerability. It is located in the fuel/modules/fuel/controllers/Login.php file. Recommendations For Fuel CMS version 1.5.0, consider temporarily disabling the login...
CVE-2021-38840
SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...
CVE-2021-38840
SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...
CVE-2021-38840: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...
PT-2021-22295
Name of the Vulnerable Software and Affected Versions Simple Water Refilling Station Management System version 1.0 Description SQL Injection can occur via the username parameter in the water refilling/classes/Login.php file. This issue allows for potential SQL injection attacks. Recommendations F...
eLearning V2(by: oretnom23) is vulnerable from remote SQL-Injection-Bypass-Authentication
Description: The eLearning V2by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication in 3 accounts of the system admin, Faculty & Student in app /elearning/classes/Login.php. remote SQL-Injection-Bypass-Authentication: . The parameter username, facultyid, and studentid from th...
Online Leave Management System 1.0 SQL Injection
Exploit Title: OLMS - PHP by: oretnom23 v1.0 SQL-Injection-Bypass-Authentication in /leavesystem/classes/Login.php. Author: nu11secur1ty Testing and Debugging: nu11secur1ty Date: 08.31.2021 Vendor: https://www.sourcecodester.com/php/14910/online-leave-management-system-php-free-source-code.html...
SES-by-oretnom23 -v1.0-SQL-Injection-bypass-Login
The SES-byoretnom23 -v1.0 is vulnerable in the application /elearning/classes/Login.php which is called from /elearning/dist/js/script.js app. The parameter username from the login form is not protected correctly and there is no security and escaping from malicious payloads. When the user is...
EyouCMS Cross-site Request Forgery Vulnerability
EyouCMS is an open source content management system CMS based on ThinkPHP.EyouCMS suffers from a cross-site request forgery vulnerability, which stems from a cross-site request forgery CSRF vulnerability in EyouCMS 1.3.6. An attacker could use the vulnerability to execute js code by adding an htm...
CVE-2020-20642
Cross Site Request Forgery CSRF vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn...
CVE-2020-20642
Cross Site Request Forgery CSRF vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn...
CVE-2020-20642: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn...
PT-2021-10519
Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.3.6 Description: A Cross Site Request Forgery CSRF issue exists, allowing an attacker to add an htm page that can execute js code via the login.php endpoint with specific parameters: m=admin, c=Filemanager, a=newfile, and...
CVE-2020-19669
Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...
PT-2021-10386
Name of the Vulnerable Software and Affected Versions: Eyoucms version 1.3.6 Description: A Cross Site Request Forgery CSRF issue exists, allowing an attacker to add an admin account via the /login.php?m=admin&c=Admin&a=admin add&lang=cn API endpoint. This can be exploited by manipulating the m, ...