10 matches found
engeman-web-language-combobox-sqli
Engeman Web = 12.0.0.2 密码恢复页面加载未授权SQL注入 关于CVE-2025-8220 中所述漏洞的利用概念验证，该漏洞涉及在Engeman Web 软件密码恢复页面加载过程中存在SQL注入 的可能性。 描述 在Engeman Web 软件中发现了一个漏洞，该漏洞允许操作密码恢复页面加载时执行的SQL 查询。此漏洞可由未持有任何有效凭证的访问者（即未授权方式）利用，从而危及应用程序数据库中存储的数据的机密性和完整性，并可能通过修改关键表中的值在组件层面造成拒绝服务。 供应商网站 https://engeman.com/en/ 漏洞利用...
EUVD-2025-22808
Malicious code in bioql PyPI...
CVE-2025-8220
A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /Login/RecoveryPass of the component Password Recovery Page. The manipulation of the argument LanguageCombobox as part of Cookie leads to sql injection. The attack is possible to ...
CVE-2025-8220
A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /Login/RecoveryPass of the component Password Recovery Page. The manipulation of the argument LanguageCombobox as part of Cookie leads to sql injection. The attack is possible to ...
CVE-2025-8220
A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /Login/RecoveryPass of the component Password Recovery Page. The manipulation of the argument LanguageCombobox as part of Cookie leads to sql injection. The attack is possible to ...
CVE-2025-8220
Summary: CVE-2025-8220 affects Engeman Web up to 12.0.0.2. The vulnerability is an SQL injection in the Password Recovery Page’s /Login/RecoveryPass, caused by manipulating the LanguageCombobox value in a Cookie. It is remotely exploitable and has public exploit disclosure. A fix is available in ...
CVE-2025-8220 Engeman Web Password Recovery RecoveryPass sql injection
A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /Login/RecoveryPass of the component Password Recovery Page. The manipulation of the argument LanguageCombobox as part of Cookie leads to sql injection. The attack is possible to ...
CVE-2025-8220 Engeman Web Password Recovery RecoveryPass sql injection
A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /Login/RecoveryPass of the component Password Recovery Page. The manipulation of the argument LanguageCombobox as part of Cookie leads to sql injection. The attack is possible to ...
Engeman Web SQL注入漏洞
Engeman Web is a maintenance management software from the Brazilian company Engeman. A SQL injection vulnerability exists in Engeman Web version 12.0.0.1 and earlier, which originates from an SQL injection caused by the parameter LanguageCombobox in the file /Login/RecoveryPass...
PT-2025-30992 · Unknown · Engeman Web
Name of the Vulnerable Software and Affected Versions: Engeman Web versions through 12.0.0.1 Description: A critical vulnerability exists in Engeman Web. The issue affects an unknown function within the /Login/RecoveryPass file of the Password Recovery Page component. Manipulation of the...