CVE-2024-24139

Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter...

CVE-2024-24139

Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter...

Sql injection

Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter...

Login System with Email Verification Security Vulnerability

Login System with Email Verification is an email verification login system by rems Personal Developer. A security vulnerability exists in Login System with Email Verification version 1.0, which is caused by an SQL injection vulnerability in the user parameter...

CVE-2024-24139

Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter...

PT-2024-20290 · Unknown · Sourcecodester Login System With Email Verification

Name of the Vulnerable Software and Affected Versions: Sourcecodester Login System with Email Verification version 1.0 Description: The issue allows SQL Injection via the user parameter. This could potentially be exploited to extract or modify sensitive data. There is no information provided abou...

CVE-2024-24139

CVE-2024-24139 affects Sourcecodester Login System with Email Verification version 1.0. The vulnerability is an SQL Injection in the 'user' parameter, allowing remote exploitation (attack vector: network; complexity: low) with privileges required: high and no user interaction. Impact is rated hig...

GitLab Fixes Critical Account Takeover Vulnerability

Summary: Critical GitLab vulnerability CVE-2023-7028 enables unauthorized users to take over the administrator account without user interaction. Exploiting password reset flaws, attackers can submit two emails, both target as well as attacker account leading to complete account takeover. Users wi...

Exploit for SQL Injection in Remyandrade Login_System_With_Email_Verification

CVE-2024-24139: Login System with Email Verificat...

Enjin: Weak Email Verification: Newly Registered Users Can Bypass Email Verification Step and Log In

Newly registered users were able to bypass email verification and log in. This vulnerability has since been addressed...

PT-2024-1045

Name of the Vulnerable Software and Affected Versions GitLab versions 16.1 through 16.7.1 Description The issue allows an attacker to specify a secondary email during a password reset request, enabling account takeover via password reset without user interaction. This vulnerability affects GitLab...

Nextcloud: Email not verified when changing afterwards on apps.nextcloud.com

The email verification bypass vulnerability was discovered in the web application apps.nextcloud.com. The vulnerability allowed attackers to create accounts with any email address without verification, effectively taking over victim accounts...

Improper Authentication

omniauth-microsoftgraph is vulnerable to Improper Authentication. The vulnerability is due to missing validation of the email attribute received from Microsoft's OAuth service. This allows an attacker to bypass the email verification in the OAuth process and takeover an account...

Design/Logic Flaw

Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect OIDC email addresses from ID tokens to verify the validity of a user's domain, but because users have the ability to change...

CVE-2023-51374

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZeroBounce ZeroBounce Email Verification & Validation allows Stored XSS.This issue affects ZeroBounce Email Verification & Validation: from n/a through 1.0.11...

CVE-2023-51374

CVE-2023-51374 is a WordPress vulnerability in the ZeroBounce Email Verification & Validation plugin (

CVE-2023-51374 WordPress ZeroBounce Email Verification & Validation Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZeroBounce ZeroBounce Email Verification & Validation allows Stored XSS.This issue affects ZeroBounce Email Verification & Validation: from n/a through 1.0.11...

WordPress Plugin ZeroBounce Email Verification & Validation Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress ZeroBounce Email Verification & Validation Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software ZeroBounce Email Verification & Validation Type Plugin Vulnerable versions = 1.0.11 Fixed in 1.0.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51374 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID acd9ba4e664e Credits DoYeon Pa...

Zammad Access Control Error Vulnerability (CNVD-2023-9782629)

Zammad is a suite of ticket management software from the German company Zammad. An access control error vulnerability exists in Zammad, which stems from a lack of rate limiting in the email address verification function, and can be exploited by an attacker to potentially send many requests to a...