EUVD-2021-34127

Malicious code in bioql PyPI...

CVE-2021-4290

A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file app/config/passport.js of the component Login. The manipulation of the argument id/email leads to sql injection. The name of the patch is...

CVE-2021-4290 DHBW Fallstudie Login passport.js sql injection

A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file app/config/passport.js of the component Login. The manipulation of the argument id/email leads to sql injection. The name of the patch is...

CVE-2021-4290 DHBW Fallstudie Login passport.js sql injection

A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file app/config/passport.js of the component Login. The manipulation of the argument id/email leads to sql injection. The name of the patch is...

CVE-2021-4290

CVE-2021-4290 affects the DHBW Fallstudie login flow, specifically an unknown functionality in the file app/config/passport.js. The vulnerability arises from manipulation of the id/email parameter, leading to SQL injection. A patch named 5c13c6a972ef4c07c5f35b417916e0598af9e123 is recommended to ...

PT-2022-11740 · Unknown · Dhbw Fallstudie

Name of the Vulnerable Software and Affected Versions: DHBW Fallstudie affected versions not specified Description: A critical issue was found in DHBW Fallstudie, affecting an unknown functionality of the file app/config/passport.js in the Login component. The manipulation of the id/email argumen...

CVE-2021-4290: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file app/config/passport.js of the component Login. The manipulation of the argument id/email leads to sql injection. The name of the patch is...