CVE-2020-35952

login.php in PHPFusion aka PHP-Fusion Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect password i.e., not a single "Incorrect username or password" message in both cases, which might allow enumeration...

CVE-2020-35952

CVE-2020-35952 affects PHPFusion (PHP-Fusion) Andromeda 9.x before 2020-12-30. The issue is that login.php generates error messages that differentiate between an incorrect username and an incorrect password, rather than a single generic message, which could enable user enumeration. The connected ...

CVE-2020-35952

login.php in PHPFusion aka PHP-Fusion Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect password i.e., not a single "Incorrect username or password" message in both cases, which might allow enumeration...

CVE-2020-35952: Undefined Security Weakness

login.php in PHPFusion aka PHP-Fusion Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect password i.e., not a single "Incorrect username or password" message in both cases, which might allow enumeration...

PT-2021-11884

Name of the Vulnerable Software and Affected Versions: PHPFusion aka PHP-Fusion Andromeda versions 9.x before 2020-12-30 Description: The issue arises from the login.php file generating distinct error messages for incorrect usernames and passwords, rather than a unified message. This distinction...

CVE-2021-3002

Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter...

CVE-2021-3002

Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter...

CVE-2021-3002

Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter...

CVE-2021-3002: Improper Neutralization of Input During Web Page Generation

Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter...

CVE-2020-20285: Improper Neutralization of Input During Web Page Generation

There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php...

PT-2020-15253

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description The issue is related to a Cross-Site Scripting XSS vulnerability in the user login page. Users can inject JavaScript code through the referer header via the "user/login.php" endpoint. This allows attackers to...

CVE-2020-28138

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...

Sql injection

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...

CVE-2020-28138

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...

CVE-2020-28138

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection in login.php via the txtUserName parameter. Root cause: improper input validation allowing SQL injection. Impact: as per CVE metrics, potential execution of arbitrary SQL with high/critical severity; remote attacker could man...

CVE-2020-28138: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...

PT-2020-16933

Name of the Vulnerable Software and Affected Versions SourceCodester Online Clothing Store version 1.0 Description The issue is related to a SQL Injection vulnerability. It occurs via the txtUserName parameter to the "login.php" endpoint. Recommendations For SourceCodester Online Clothing Store...

CVE-2020-28133: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in salesinventory/login.php...

PT-2020-16931

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Grocery Store Sales And Inventory System version 1.0 Description An issue was discovered in the web login functionality, allowing authentication bypass. This enables an attacker to gain client privileges via SQL injection...

CVE-2020-27886

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to exploit the usernameavailable function of the includes/functions.php file which is called by login.php...