Alumni Management System 1.0 - SQL Injection

SourceCodester Alumni Management System 1.0 contains a sqlinjection caused by unsanitized input in admin/login.php, letting attackers bypass authentication, exploit requires injection of malicious SQL payload. id: CVE-2020-29214 info: name: Alumni Management System 1.0 - SQL Injection author:...

Breacher

Breacher Un script para encontrar páginas de inicio de sesión de administrador y vulnerabilidades EAR. Características Multihilo a demanda Lista grande de rutas 482 rutas Soporta extensiones php, asp y html Verifica posibles vulnerabilidades EAR Verifica robots.txt Soporte para rutas personalizad...

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting en el Sistema de Gestión de Donantes de Sangre usando CodeIgniter - 1.0 Descripción sugerida Phpgurukul Sistema de Gestión de Donantes de Sangre 1.0 permite Cross Site Scripting a través de la función Agregar Nombre de Grupo Sanguíneo. Información Adicional PoC...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

CVE-2023-7172

CVE-2023-7172 Resumen Este proyecto contiene una versión vulnerable de un Sistema de Gestión Hospitalaria HMS que es susceptible a Inyección SQL CVE-2023-7172. La Inyección SQL es una vulnerabilidad crítica de aplicaciones web que puede tener impactos graves en la seguridad y funcionalidad de un...

CVE-2024-9933

CVE-2024-9933 WatchTowerHQ = 3.10.1 - Omisión de Autenticación a Administrador debido a la Falta de Verificación de Valor Vacío Descripción: El plugin WatchTowerHQ para WordPress es vulnerable a una omisión de autenticación en versiones hasta la 3.9.6 inclusive. Esto se debe a que el valor...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Bypass-Crítico-de-Autenticación- CVE-2025-41646 - Bypass crítico de autenticación 🔓 CVE-2025-41646 - RevPi WebStatus Bypass de Autenticación PoC Una vulnerabilidad crítica de bypass de autenticación CVE-2025-41646 en RevPi WebStatus ≤ v2.4.5 permite a un atacante iniciar sesión...

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 SQLi sin autenticación y Bypass de inicio de sesión CVE-2024-25227 Fecha: 23/02/2024 Probado en ABO.CMS 5.8 Vendedor: ABO.CMS URL del vendedor:https://abocms.ru ABO.CMS 5.8 es vulnerable a inyección SQL a través del parámetro tblogin, página de inicio de sesión d...

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Credencial de administrador codificada en i-doit Pro 25 y versiones anteriores i-doit Pro 25 y versiones anteriores son vulnerables a una vulnerabilidad de credencial de administrador codificada. Estas vulnerabilidades permiten que cualquier persona inicie sesión como administrad...

CVE-2024-10924

Exploit para CVE-2024-10924 Plugin Really Simple Security de WordPress - Bypass de Autenticación 📌 Descripción General CVE-2024-10924 es una vulnerabilidad crítica de omisión de autenticación en el plugin Really Simple Security para WordPress versiones 9.0.0 a 9.1.1.1. Esta vulnerabilidad permite...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — Authentication bypass / incorrect access control in PerfexCRM Note: Steps above are the original discovery steps reported by Ajansha Shankar and Ahamed Yaseen. References OWASP Authentication Cheat Sheet — gui...

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - bypass de fuerza bruta - CVE-2019-17240 Script muy sencillo basado en CVE-2019-17240. POC original y explicación: https://github.com/bludit/bludit/pull/1090. usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p...

EUVD-2026-85674

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601

A SQL injection vulnerability exists in the Admin Login Handler component of Abdurrab5 online-makeup-store . The flaw is located within an unknown function of the index.php file and is triggered by manipulating the id/password arguments. This vulnerability can be exploited remotely , and the expl...

CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

PT-2026-97606

Name of the Vulnerable Software and Affected Versions Abdurrab5 online-makeup-store affected versions not specified Description An issue exists in the Admin Login Handler component within the index.php file. Remote attackers can perform SQL injection, a technique used to manipulate database...

CVE-2026-93980 code-projects Internship Management System Admin Login Form login.php sql injection

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from...