PT-2024-15366 · Unknown · Rrj Nueva Ecija Engineer Online Portal

Name of the Vulnerable Software and Affected Versions: RRJ Nueva Ecija Engineer Online Portal version 1.0 Description: A vulnerability was found in the Admin Panel component of the RRJ Nueva Ecija Engineer Online Portal. The issue affects an unknown functionality of the file /admin/admin user.php...

CVE-2023-4541

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ween Software Admin Panel allows SQL Injection. This issue affects Admin Panel: through 20231229. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2023-4541

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ween Software Admin Panel allows SQL Injection.This issue affects Admin Panel: through 20231229. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2023-4541

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ween Software Admin Panel allows SQL Injection. This issue affects Admin Panel: through 20231229. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ween Software Admin Panel allows SQL Injection.This issue affects Admin Panel: through 20231229. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2023-4541 SQLi in Weens Admin Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ween Software Admin Panel allows SQL Injection. This issue affects Admin Panel: through 20231229. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2023-4541

The CVE-2023-4541 entry concerns Ween Software Admin Panel, where an SQL Injection vulnerability arises from improper neutralization of special elements in SQL commands. Affected software is the Admin Panel up to version 20231229 (through 20231229). The reported impact is high: allows unauthorize...

PT-2023-29549 · Ween · Ween Software Admin Panel

Name of the Vulnerable Software and Affected Versions: Ween Software Admin Panel versions through 20231229 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The vend...

Ween Software Admin Panel SQL Injection Vulnerability

Ween Software Admin Panel is an admin panel application. Ween Software Admin Panel 20231229 and earlier versions are vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability...

CVE-2023-7139

A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/regester.php of the component HTTP POST Request Handler. The manipulation of the argument fname/lname/email/contact leads to sql...

CVE-2023-6768

Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4. This vulnerability could allow an unauthenticated user to access the admin panel without providing any credentials by simply accessing the "lpadmin.php?adminstep=" parameter...

CVE-2023-6768

Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4. This vulnerability could allow an unauthenticated user to access the admin panel without providing any credentials by simply accessing the "lpadmin.php?adminstep=" parameter...

Authentication flaw

Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4. This vulnerability could allow an unauthenticated user to access the admin panel without providing any credentials by simply accessing the "lpadmin.php?adminstep=" parameter...

CVE-2023-6768

CVE-2023-6768 affects Amazing Little Poll versions 1.3 and 1.4. It describes an authentication bypass where an unauthenticated user can reach the admin panel by accessing the lp_admin.php?adminstep= parameter, enabling unauthorized access to sensitive admin functionality. The vulnerability is dem...

Amazing Little Poll License Issue Vulnerability

Amazing Little Poll is Amazing Little Poll open source a very simple php voting script. An authorization issue vulnerability exists in Amazing Little Poll version 1.3, 1.4. An attacker can exploit this vulnerability to access the admin panel by bypassing authentication...

Cross site scripting

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

Emlog 安全漏洞

emlog is a PHP and MySQL based CMS builder. Emlog Pro v2.1.14 version of a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the component /admin/article.php?activesavedraft, which can be exploited by an attacker...

PT-2023-32769 · Unknown · Amazing Little Poll

Name of the Vulnerable Software and Affected Versions: Amazing Little Poll versions 1.3 through 1.4 Description: The issue allows an unauthenticated user to access the admin panel without providing any credentials by accessing the "lp admin.php?adminstep=" parameter. This could enable unauthorize...

GHSA-GJJ8-M83C-QV9H Cross-site Scripting in evershop

Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel...

Cross-site Scripting in evershop

Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel...