Lucene search
+L

2582 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/22 12:00 a.m.•6 views

CVE-2023-44752: Improper Authentication

An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php...

9.8CVSS5.8AI score0.00673EPSS
SaveExploits1References1
CVE
CVE
•added 2025/04/14 7:31 a.m.•99 views

CVE-2025-3556

CVE-2025-3556 affects ScriptAndTools eCommerce-website-in-PHP 3.0. The vulnerability resides in an unknown functionality of /admin/login.php, where improper restriction of excessive authentication attempts can be exploited remotely. Documents consistently describe high attack complexity and high ...

8.1CVSS4.3AI score0.00989EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/14 7:31 a.m.•11 views

CVE-2025-3556 ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication

A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be...

6.3CVSS4.3AI score0.00989EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/14 12:00 a.m.•7 views

CVE-2025-3555: Improper Restriction of Excessive Authentication Attempts

A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...

8.1CVSS4.5AI score0.00989EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/14 12:00 a.m.•4 views

CVE-2025-3556: Improper Restriction of Excessive Authentication Attempts

A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be...

8.1CVSS4.6AI score0.00989EPSS
SaveExploits1References1
Mend
Mend
•added 2025/04/09 11:00 a.m.•5 views

CVE-2017-20197

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

7.5CVSS0.00392EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•4 views

CVE-2017-20197: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

7.5CVSS6.6AI score0.00392EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•4 views

PT-2025-15689

Name of the Vulnerable Software and Affected Versions: propanetank Roommate-Bill-Tracking versions up to 288437f658fc9ee7d4b92a9da12557024d8bc55c Description: A critical issue has been found in the code of the /includes/login.php file. The manipulation of the Username argument leads to SQL...

7.5CVSS0.00392EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•10 views

CVE-2025-3351: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotel...

9.8CVSS6.9AI score0.00508EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/06 12:32 a.m.•43 views

CVE-2025-3187

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS7.4AI score0.00562EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/04 1:15 a.m.•19 views

CVE-2025-3187

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS0.00562EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•8 views

CVE-2025-3187: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/25 5:21 p.m.•24 views

CVE-2025-2656

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS7.8AI score0.00527EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/23 5:00 p.m.•56 views

CVE-2025-2656 PHPGurukul Zoo Management System login.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

7.5CVSS0.00527EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•4 views

CVE-2025-2656: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS6.9AI score0.00527EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/19 5:32 p.m.•27 views

CVE-2025-2385

A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument userEmail/userPassword leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.9AI score0.00544EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•6 views

PT-2025-11517

Name of the Vulnerable Software and Affected Versions code-projects Modern Bag version 1.0 Description A critical issue has been discovered, affecting the /login.php file. The manipulation of the userEmail and userPassword arguments leads to SQL injection. This issue can be exploited remotely...

9.8CVSS0.00544EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•8 views

CVE-2025-2385: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument userEmail/userPassword leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7AI score0.00544EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/09 12:00 a.m.•4 views

PT-2025-10446

Name of the Vulnerable Software and Affected Versions Quantico Tecnologia PRMV version 6.48 Description A critical vulnerability was found in Quantico Tecnologia PRMV, affecting an unknown part of the file /admin/login.php of the component Login Endpoint. The manipulation of the username argument...

7.5CVSS0.00512EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/07 12:00 a.m.•8 views

CVE-2025-2050: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched...

9.8CVSS7AI score0.00537EPSS
SaveExploits1References1
Rows per page
Query Builder