CVE-2024-51213

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2024-48654

Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted script to the login.php component...

CVE-2024-48654

Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted script to the login.php component...

CVE-2024-48654

Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted script to the login.php component...

CVE-2024-48644

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...

CVE-2024-48644

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...

CVE-2023-52950

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified vectors...

CVE-2023-52950

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified vectors...

CVE-2023-52950

CVE-2023-52950 affects Synology Active Backup for Business Agent’s login component. The root cause is missing encryption of sensitive data, enabling adjacent (local) attackers to perform MITM-style credential exposure via unspecified vectors. Impact is confined to confidentiality loss of user cre...

CVE-2023-52950

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified vectors...

CVE-2024-8368

The CVE-2024-8368 entry concerns code-projects Hospital Management System version 1.0, where the Login index.php component is vulnerable to SQL injection via the username parameter. This flaw could be exploited remotely and has been publicly disclosed. Root cause is an SQL injection in the handli...

PT-2024-38973 · Code Projects · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hospital Management System version 1.0 Description: A critical issue has been identified in the code-projects Hospital Management System, affecting some unknown functionality of the file index.php of the component Login. The...

CVE-2024-42559

An issue in the login component processlogin.php of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid password...

CVE-2024-42559

An issue in the login component processlogin.php of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid password...

CVE-2024-42559

An issue in the login component processlogin.php of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid password...

CVE-2024-42559

CVE-2024-42559 affects Hotel Management System (commit 79d688). The vulnerability resides in the login component (process_login.php) allowing attackers to authenticate without a valid password, impacting confidentiality, integrity, and availability; CVSSv3.1 base score 9.8 (NETWORK, HIGH impact)....

Super easy enterprise management system 安全漏洞

Super easy enterprise management system is a comprehensive enterprise management software from Guangzhou Super easy Information Technology Co., Ltd. designed to help organizations improve operational efficiency and management. A security vulnerability exists in Super easy enterprise management...

CVE-2024-42679

CVE-2024-42679 affects Super easy enterprise management system v1.0.0 and earlier. The issue is a SQL Injection in the /ajax/Login.ashx component that can allow a local attacker to run arbitrary code. Root cause is unsanitized input leading to SQL injection. Impact is described as high (confident...

PT-2024-30104 · Unknown · Super Easy Enterprise Management System

Name of the Vulnerable Software and Affected Versions: Super easy enterprise management system versions 1.0.0 and before Description: The issue allows a local attacker to execute arbitrary code via a crafted script to the "/ajax/Login.ashx" component. This enables the attacker to potentially gain...

CVE-2024-7636

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file authenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attac...