PT-2025-21762 · Unknown · Codeastro Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Pharmacy Management System version 1.0 Description: A critical issue was found in the CodeAstro Pharmacy Management System, affecting some unknown functionality of the file "/index.php" in the Login component. The manipulation of th...

CVE-2025-3847

CVE-2025-3847 affects markparticle WebServer up to 1.0. The vulnerability is in the Login component, specifically in code/http/httprequest.cpp, where manipulation of the username/password arguments leads to an SQL injection. It can be exploited remotely, and the exploit has been disclosed publicl...

WebServer 注入漏洞

WebServer is a C++ Linux WebServer server by MARK Individual Developers. An injection vulnerability exists in WebServer version 1.0, which originates from SQL injection due to manipulation of username/password parameters by the Login component in the file code/http/httprequest.cpp...

PT-2025-17469 · Unknown · Markparticle Webserver

Name of the Vulnerable Software and Affected Versions: markparticle WebServer versions up to 1.0 Description: A critical vulnerability has been found in the markparticle WebServer, affecting an unknown part of the file code/http/httprequest.cpp of the component Login. The manipulation of the...

CVE-2025-3148

A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been...

CVE-2025-3148

A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been...

CVE-2025-3148

A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been...

CVE-2025-3148

The CVE-2025-3148 entry refers to Codeprojects Product Management System version 1.0. Affected component: Login. Root cause: manipulation of the Str1 argument leads to a buffer overflow. Impact is described as potentially compromising confidentiality, integrity, and availability; exploitation is ...

CVE-2025-3148 codeprojects Product Management System Login buffer overflow

A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been...

PT-2025-14603 · Unknown · Code-Projects Product Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Product Management System version 1.0 Description: A vulnerability was found in the codeprojects Product Management System, classified as problematic. This issue affects some unknown processing of the component Login. The...

CVE-2024-6745

A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown function of the file adminauthenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. It is possible to launch the attack...

PT-2025-4078 · Cianet · Cianet Onu Gw24Ac

Name of the Vulnerable Software and Affected Versions: Cianet ONU GW24AC versions up to 20250127 Description: A problem has been detected in the Login component of the affected software, where the manipulation of the browserLang argument leads to cross-site scripting. This issue can be exploited...

PT-2025-4072 · Unknown · 1000 Projects Employee Task Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Employee Task Management System version 1.0 Description: A critical issue affects the Login component of the system, specifically the file /index.php. The manipulation of the email argument leads to sql injection. This issue can...

PT-2025-4068 · Unknown · Needyamin Library Card System

Name of the Vulnerable Software and Affected Versions: needyamin Library Card System version 1.0 Description: A critical issue affects some unknown processing of the file admin.php of the component Login. The manipulation of the email/password argument leads to SQL injection. The attack may be...

PT-2025-3842 · Code Projects · Code-Projects Admission Management System

Name of the Vulnerable Software and Affected Versions: code-projects Admission Management System version 1.0 Description: A critical issue has been found in the Login component of the system, specifically in the file index.php. The manipulation of the u id argument leads to SQL injection. This...

CVE-2024-13038

A vulnerability was found in CodeAstro Simple Loan Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be...

Code-Projects Hospital Management System 注入漏洞

Hospital Management System a hospital management system. Hospital Management System has a SQL injection vulnerability that originates from the manipulation of username/password parameters in the login component of the /admin/index.php file. No details of the vulnerability are available at this ti...

CVE-2024-12663

A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The...

CVE-2024-51213

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2024-51213

CVE-2024-51213 is a cross-site scripting vulnerability in Online Shop Store v1.0, exploitable via the login.php component. A remote attacker could cause arbitrary code execution as described in the entry, with CVSS 3.1 base score 6.1 (MEDIUM) and network access, no privileges, user interaction re...