2574 matches found
CVE-2023-31752: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employeegatepass/classes/Login.php...
CVE-2023-2641: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Internship Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/login.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql...
CVE-2020-21038
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
CVE-2020-21038
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
Open redirect
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
typecho 输入验证错误漏洞
typecho is a PHP blogging platform for typecho individual developers. It is simple and powerful. A security vulnerability exists in typecho version 1.1-17.10.30-release, which stems from a redirection vulnerability via the referer parameter of Login.php...
CVE-2020-21038
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
PT-2023-11571 · Typecho · Typecho
Name of the Vulnerable Software and Affected Versions: Typecho versions 1.1 through 17.10.30-release Description: The issue is related to an open redirect vulnerability. It can be exploited via the referer parameter to the "Login.php" endpoint. Recommendations: For Typecho versions 1.1 through...
CVE-2020-21038: URL Redirection to Untrusted Site
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
CVE-2020-21038
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...
CVE-2020-21038
Open redirect vulnerability (CVE-2020-21038) in Typecho 1.1-17.10.30-release, exploitable via the referer parameter to Login.php. Root cause: improper handling of referer input leads to redirection to arbitrary URLs. Affected software/version: Typecho 1.1 through 17.10.30-release. Impact: potenti...
CVE-2023-2205 Campcodes Retro Basketball Shoes Online Store login.php sql injection
A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...
CVE-2023-2205: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...
Campcodes Online Traffic Offense Management System SQL Injection Vulnerability (CNVD-2023-29406)
Campcodes Online Traffic Offense Management System is a web-based traffic offense management system. A SQL injection vulnerability exists in Campcodes Online Traffic Offense Management System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the paramet...
CVE-2023-2073 Campcodes Online Traffic Offense Management System Login.php sql injection
A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Login.php. The manipulation of the argument password leads to sql injection. The attack can be...
CVE-2023-2057
A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...
CVE-2023-2057
A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...
CVE-2023-2057 EyouCms New Picture cross site scripting
A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...
CVE-2023-29623: Improper Neutralization of Input During Web Page Generation
Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...