Lucene search
+L

163 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 1:48 a.m.•12 views

CVE-2023-2641

A vulnerability was found in SourceCodester Online Internship Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/login.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql...

9.8CVSS7.4AI score0.008EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/06 12:00 a.m.•2 views

CVE-2025-4331: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Online Student Clearance System 1.0. This vulnerability affects unknown code of the file /Admin/login.php. The manipulation of the argument id/username/password leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS7AI score0.00639EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/22 12:00 a.m.•4 views

CVE-2023-44752: Improper Authentication

An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php...

9.8CVSS5.8AI score0.00673EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/14 12:00 a.m.•1 views

CVE-2025-3556: Improper Restriction of Excessive Authentication Attempts

A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be...

8.1CVSS4.6AI score0.00989EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•5 views

CVE-2025-3351: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotel...

9.8CVSS6.9AI score0.00508EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/25 5:21 p.m.•21 views

CVE-2025-2656

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS7.8AI score0.00527EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•1 views

CVE-2025-2656: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS6.9AI score0.00527EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/05 12:00 a.m.•1 views

CVE-2025-1965: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in projectworlds Online Hotel Booking 1.0. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument emailusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS7AI score0.00649EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•2 views

CVE-2024-13085: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...

9.8CVSS5.5AI score0.00506EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/14 12:00 a.m.•3 views

CVE-2024-50823: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters...

9.8CVSS5.8AI score0.00488EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/05 12:00 a.m.•4 views

CVE-2024-44727: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

9.8CVSS5.8AI score0.00532EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/05 12:00 a.m.•1 views

PT-2024-39040

Name of the Vulnerable Software and Affected Versions: Jobportal versions affected versions not specified Description: A Cross-Site Scripting XSS issue exists due to insufficient encryption of user-controlled input. This could allow an attacker to retrieve the session details of an authenticated...

6.3CVSS0.00278EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/05 12:00 a.m.•3 views

CVE-2024-8473: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through useremail parameter in /jobportal/admin/login.php...

6.3CVSS5.9AI score0.00278EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/06 12:00 a.m.•4 views

CVE-2024-7498: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to...

9.8CVSS6.9AI score0.00655EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/20 12:00 a.m.•2 views

CVE-2024-5118: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.5AI score0.00746EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/08 11:00 a.m.•77 views

CVE-2024-3438

CVE-2024-3438 affects SourceCodester Prison Management System 1.0. The vulnerability exists in the /Admin/login.php file, where input handling enables SQL injection. Exploitation is possible remotely, and public disclosure is noted. Multiple connected documents corroborate the issue and describe ...

9.8CVSS7.5AI score0.00851EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/08 12:00 a.m.•2 views

CVE-2024-3438: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/login.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS5.5AI score0.00851EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/06 12:00 a.m.•5 views

CVE-2024-3359: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of the file admin/login.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The explo...

9.8CVSS5.5AI score0.00963EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/05 12:00 a.m.•1 views

CVE-2024-3349: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/login.php. The manipulation of the argument email leads to sql injection. The attack can be launched...

9.8CVSS5.5AI score0.00851EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•3 views

CVE-2024-3226: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS5.5AI score0.00773EPSS
SaveExploits1References2
Rows per page
Query Builder