PT-2023-23448 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: The issue is related to SQL Injection via the /employee gatepass/classes/Login.php endpoint. This allows for potential exploitation. Recommendations: For...

PT-2023-23408 · Wso2 · Wso2 Api Manager

Name of the Vulnerable Software and Affected Versions: WSO2 API Manager versions prior to 4.2.0 Description: A reflected cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tenantDomain parameter in the...

CVE-2023-27742

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

PT-2023-21313 · Unknown · Idurar Erp/Crm

Name of the Vulnerable Software and Affected Versions: IDURAR ERP/CRM version 1 Description: The issue is related to a SQL injection vulnerability. It affects the /api/login component. Recommendations: For IDURAR ERP/CRM version 1, consider restricting access to the /api/login endpoint until a...

PT-2023-19970 · Caton · Caton Ctp Relay Server

Name of the Vulnerable Software and Affected Versions: Caton CTP Relay Server version 1.2.9 Description: A critical issue has been found in the API component of the affected software, specifically in the /server/api/v1/login endpoint. The manipulation of the username and password arguments leads ...

PT-2023-17720 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A critical issue was found in the system, affecting the /classes/Login.php file. The manipulation of the username argument leads to SQL injection. This issue can be...

PT-2023-22334 · Unknown · Purchase Order Management

Name of the Vulnerable Software and Affected Versions: Purchase Order Management version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the password parameter at the "/purchase order/admin/login.php" API endpoint. Recommendations: F...

CVE-2023-26856

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/ajax.php?action=login...

PT-2023-17040 · Sourcecodester · Alphaware - Simple E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester Alphaware Simple E-Commerce System version 1.0 Description: A critical issue was found in the software, affecting unknown code. The manipulation of the email and password arguments with a specific input leads to SQL injection...

PT-2023-16996 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online Pizza Ordering System. This issue affects the Login Page component, specifically the file...

PT-2023-21007 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: A cross-site scripting XSS issue in the /php-opos/login.php endpoint of the Online Pizza Ordering System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2023-16841 · Sourcecodester · Health Center Patient Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A critical issue was found in the login.php file, where the manipulation of the username argument leads to sql injection. This issue can be exploited...

SUSE CVE-2017-14980

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login...

SUSE CVE-2021-21241

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is a independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. In Flask-Security-Too from version 3.3.0 and before version 3.4.5, the /login and...

CVE-2022-4496

The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin version 20.0.0 before 20.0.7 does not validate that the redirect parameter to its SSO login endpoint points to an...

PT-2023-14950 · Unknown · Online Student Enrollment System

Name of the Vulnerable Software and Affected Versions: Online Student Enrollment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the "/student enrollment/admin/login.php" API endpoint...

PT-2023-16116 · Sourcecodester · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A critical issue has been found in the Login Page component of the affected software. The issue is related to the manipulation of the Username argument in the...

PT-2022-27080 · Unknown · Simmeth Lieferantenmanager

Name of the Vulnerable Software and Affected Versions: Simmeth Lieferantenmanager versions prior to 5.6 Description: An issue was discovered due to errors in session management, allowing an attacker to log back into a victim's account after the victim logged out. The "/LMS/LM/main" endpoint can b...

PT-2022-27375 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A DOM-based cross-site scripting XSS issue was found in the /rukovoditel/index.php?module=users/login component. This allows attackers to cause a Denial of Service DoS by sending a crafted GET request...

PT-2022-27457 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.6.0 Description: A cross-site scripting XSS issue exists in the Url parameter of the "/login.php" API endpoint, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For EyouCMS...