25 matches found
CVE-2020-37156
BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerability by sending a crafted payload with '=''or' parameters to bypass login authentication and gain unauthorized access...
CVE-2020-37156
BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerability by sending a crafted payload with '=''or' parameters to bypass login authentication and gain unauthorized access...
CVE-2020-37156 BloodX 1.0 - Authentication Bypass
BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerability by sending a crafted payload with '=''or' parameters to bypass login authentication and gain unauthorized access...
CVE-2020-37156
BloodX 1.0 contains an authentication bypass in login.php that allows bypassing login with a crafted payload containing =''or'. Attackers can access the dashboard without valid credentials. The issue is described with a CVSS v3.1 base score of 6.5 (MEDIUM) and CVSS v4.0 base score of 6.9 (MEDIUM)...
CVE-2020-37156 BloodX 1.0 - Authentication Bypass
BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerability by sending a crafted payload with '=''or' parameters to bypass login authentication and gain unauthorized access...
BloodX security vulnerabilities
BloodX is a blood bank management backend developed by Divesh Jain personally. Version 1.0 of BloodX contains a security vulnerability; this vulnerability stems from an authentication bypass in the login.php file, which may allow attackers to access the dashboard without valid credentials...
CVE-2020-37156: Authentication Bypass Using an Alternate Path or Channel
BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerability by sending a crafted payload with '=''or' parameters to bypass login authentication and gain unauthorized access...
EUVD-2020-21657
Malware in sbrugna...
CVE-2020-29282
SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication...
Bloodx Project SQL Injection (CVE-2020-29282)
An SQL injection vulnerability exists in Bloodx Project. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Bloodx CMS has a flawed logic vulnerability
BloodX CMS is a cms. Bloodx CMS suffers from a logic flaw vulnerability that can be exploited by an attacker to obtain sensitive system information...
BloodX SQL Injection Vulnerability
Diveshlunker Bloodx is a Php-based website builder for blood bank management by the individual developer Diveshlunker. BloodX version 1.0 suffers from a SQL injection vulnerability that can be exploited by attackers to bypass authentication...
CVE-2020-29282
SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication...
CVE-2020-29282
SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication...
Sql injection
SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication...
CVE-2020-29282
SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication...
CVE-2020-29282
BloodX 1.0 is affected by a SQL injection vulnerability that enables bypass of authentication. The issue is documented across multiple sources (e.g., CVE-2020-29282 entries in NVD, Red Hat advisory, CNVD, CPAdvisories, CVE lists) and is consistently described as an SQL injection flaw in BloodX 1....
Diveshlunker Bloodx SQL Injection Vulnerability
Diveshlunker Bloodx is a Php-based website builder for blood bank management by the individual developer Diveshlunker. BloodX version 1.0 suffers from a SQL injection vulnerability that can be exploited by attackers to bypass authentication...
PT-2020-17131
Name of the Vulnerable Software and Affected Versions BloodX version 1.0 Description The issue allows attackers to bypass authentication due to a SQL injection vulnerability. Recommendations For BloodX version 1.0, consider restricting access to sensitive data and authentication mechanisms until ...