Lucene search
+L

2317 matches found

CVE
CVE
•added 2024/07/22 2:00 a.m.•68 views

CVE-2024-6966

CVE-2024-6966 affects itsourcecode Online Blood Bank Management System 1.0, specifically the Login component (login.php). The vulnerability is a SQL injection triggered by manipulating the user/pass argument, with remote access possible and public disclosure of exploits. Multiple sources corrobor...

9.8CVSS7.5AI score0.00727EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/22 12:00 a.m.•3 views

CVE-2024-6966: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php of the component Login. The manipulation of the argument user/pass leads to sql injection. The attack may be...

9.8CVSS6.9AI score0.00727EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/16 5:15 p.m.•35 views

CVE-2019-16641

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EGRGOS 11.11B1...

8.4CVSS0.00301EPSS
SaveExploits1References1
OSV
OSV
•added 2024/07/16 5:15 p.m.•14 views

CVE-2019-16641

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EGRGOS 11.11B1...

8.4CVSS6.1AI score0.00301EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/07/16 12:00 a.m.•18 views

CVE-2019-16641

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EGRGOS 11.11B1...

8.6AI score0.00301EPSS
SaveExploits1References1
CVE
CVE
•added 2024/07/16 12:00 a.m.•62 views

CVE-2019-16641

The Ruijie EG-2000 series gateway (specifically version EG-2000SE EG_RGOS 11.1(1)B1 ) is vulnerable to a stack-based buffer overflow in the client.so file. A malicious actor can exploit this by utilizing the login.php script to bypass authentication and log into any account without a password, po...

8.4CVSS7.4AI score0.00301EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/16 12:00 a.m.•2 views

CVE-2024-40393: Improper Neutralization of Special Elements used in an SQL Command

Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php...

9.8CVSS5.8AI score0.00576EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/16 12:00 a.m.•3 views

CVE-2019-16641: Stack-based Buffer Overflow

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EGRGOS 11.11B1...

8.4CVSS5.9AI score0.00301EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/09 8:15 p.m.•45 views

CVE-2024-37871

SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter...

8.2CVSS0.00454EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/07/09 12:00 a.m.•21 views

PT-2024-27800 · Unknown · Itsourcode Online Discussion Forum Project In Php With Source Code

Name of the Vulnerable Software and Affected Versions: Itsourcecode Online Discussion Forum Project in PHP with Source Code version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the email parameter in the "login.php" file...

8.2CVSS8.1AI score0.00454EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•2 views

CVE-2024-37871: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter...

8.2CVSS6.4AI score0.00454EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/23 12:00 a.m.•0 views

CVE-2024-6268: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1. Affected by this issue is some unknown functionality of the file login.php of the component Login Page. The manipulation of the argument email leads to sql injection. The atta...

9.8CVSS6.9AI score0.00574EPSS
SaveExploits1References1
OSV
OSV
•added 2024/06/21 1:16 a.m.•18 views

CVE-2024-6213

A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file login.php of the component Login Panel. The manipulation of the argument username leads to sql injection. It is possible to initiate...

9.8CVSS5.6AI score0.00682EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/06/21 12:31 a.m.•13 views

CVE-2024-6213 SourceCodester Food Ordering Management System Login Panel login.php sql injection

A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file login.php of the component Login Panel. The manipulation of the argument username leads to sql injection. It is possible to initiate...

7.5CVSS7.3AI score0.00682EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/21 12:00 a.m.•2 views

CVE-2024-6213: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file login.php of the component Login Panel. The manipulation of the argument username leads to sql injection. It is possible to initiate...

9.8CVSS6.8AI score0.00682EPSS
SaveExploits1References1
NVD
NVD
•added 2024/06/20 3:15 p.m.•28 views

CVE-2024-6192

A vulnerability classified as critical was found in itsourcecode Loan Management System 1.0. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...

9.8CVSS0.00614EPSS
SaveExploits1References4
CVE
CVE
•added 2024/06/20 2:31 p.m.•75 views

CVE-2024-6191

CVE-2024-6191 affects itsourcecode Student Management System 1.0, specifically the Login Page login.php. The vulnerability is a SQL injection caused by unsafely handling the user parameter, exploitable remotely. Public disclosure has occurred. The connected sources discuss remote impact and the n...

9.8CVSS7.8AI score0.00574EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/20 5:18 a.m.•17 views

CVE-2024-6113 itsourcecode Monbela Tourist Inn Online Reservation System login.php sql injection

A vulnerability was found in itsourcecode Monbela Tourist Inn Online Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS7.4AI score0.00707EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/06/20 5:18 a.m.•51 views

CVE-2024-6113 itsourcecode Monbela Tourist Inn Online Reservation System login.php sql injection

A vulnerability was found in itsourcecode Monbela Tourist Inn Online Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS0.00707EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/06/20 12:00 a.m.•14 views

Monbela Tourist Inn Online Reservation System SQL注入漏洞

Monbela Tourist Inn Online Reservation System is itsourcecode open source an online reservation system for tourists and hotels developed using PHP for storing and retrieving data or any transactions carried out. itsourcecode Monbela Tourist Inn Online Reservation System login.php SQL injection...

9.8CVSS7.7AI score0.00707EPSS
SaveExploits1References5
Rows per page
Query Builder