44 matches found
CVE-2025-9002 Surbowl dormitory-management-php login.php sql injection
A vulnerability was identified in Surbowl dormitory-management-php 1.0. This affects an unknown part of the file login.php. The manipulation of the argument Account leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...
dormitory-management-php 安全漏洞
dormitory-management-php is a school dormitory management system by the individual developer Jayden Cai. A security vulnerability exists in dormitory-management-php version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter Account in the file login.php...
Tenda CH22 formdeleteUserName function buffer overflow vulnerability
Tenda CH22 is an enterprise-grade wireless router from Tenda. The Tenda CH22 suffers from a buffer overflow vulnerability that originates from the formdeleteUserName function in the /goform/deleteUserName file improperly handling the oldaccount parameter. An attacker can exploit this vulnerabilit...
Tenda CH22 安全漏洞
Tenda CH22 is an enterprise-grade wireless router from Tenda. The Tenda CH22 suffers from a buffer overflow vulnerability that originates from the formdeleteUserName function in the /goform/deleteUserName file improperly handling the oldaccount parameter. An attacker can exploit this vulnerabilit...
CVE-2022-45509
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the account parameter at /goform/addUserName...
Web-School ERP 跨站脚本漏洞
Web-School ERP is an application from Web-School India, Inc. An ERP application. A cross-site scripting vulnerability exists in School ERP Pro+Responsive version 1.0, which originates from a cross-site scripting vulnerability in the /schoolerp/officeadmin/ page for the esbankacc, esbankname,...
CVE-2022-45509
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the account parameter at /goform/addUserName...
CVE-2022-45509
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the account parameter at /goform/addUserName...
Stack overflow
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the account parameter at /goform/addUserName...
CVE-2022-45509
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the account parameter at /goform/addUserName...
Tenda W30E 缓冲区错误漏洞
Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the newaccount parameter of /goform/editUserName...
Simple Cold Storage Management System 跨站脚本漏洞
Simple Cold Storage Management System is a Simple Cold Storage Management System by Carlo Montero Personal Developer. A security vulnerability exists in SourceCodester Simple Cold Storage Management System version 1.0, which stems from a cross-site scripting attack due to an incorrect manipulatio...
CVE-2021-46307
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...
CVE-2018-15745
Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter...
Rincewind Cross-Site Scripting Vulnerability
Rincewind is a content management system CMS. A cross-site scripting vulnerability exists in Rincewind version 0.1. A remote attacker can inject arbitrary web script or HTML by sending a p=account request to the index.php and commonPages.php files...
Reflective Cross-Site Scripting Vulnerability in AliMom RAP
AliMom RAP is an omni-directional marketing platform. A reflective cross-site scripting vulnerability exists in AliMom RAP. The vulnerability is due to the account parameter fails to correctly filter and escape the data submitted by the user, the attacker through the construction of XSS statement...
PowerSCADA Photovoltaic Power Generation Automation Monitoring System APP suffers from SQL Injection Vulnerability
PowerSCADA PV power generation automation monitoring system APP is a power monitoring system that realizes real-time monitoring of all aspects of power, viewing of historical data, and real-time response to alarm messages in mobile terminals. PowerSCADA PV automation monitoring system APP has SQL...
BookingeCMS HotelCMS酒店预订管理系统account参数SQL注入
0x01 漏洞简述 提交时间： 2015-09-04 13:33 公开时间： 2015-12-06 09:00 漏洞类型： SQL注射漏洞 珠海中新信息科技有限公司开发的BookingeCMS HotelCMS /?m=login.checkAccount&account= 文件account参数存在注入 0x02 漏洞利用 测试Payload: （get提交） /?m=login.checkAccount&account= /?m=login.checkAccount&account= ' AND SELECT 9468 FROMSELECT...
