Lucene search
+L

359 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 9:54 p.m.•20 views

CVE-2022-2708

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input [email protected]' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...

9.8CVSS7.2AI score0.00552EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:26 p.m.•12 views

CVE-2021-26123

LivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm...

6.1CVSS5.9AI score0.00672EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:43 a.m.•19 views

CVE-2019-1010207

Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting XSS. The impact is: Stealing of session cookies. The component is: File: Login. Parameters: interim-login, wp-lang, and supplied URL. The attack vector is: If a victim clicks a malicious link, the attacker can steal his/he...

6.1CVSS6.6AI score0.01548EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/11 12:15 a.m.•39 views

CVE-2025-45885

PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries...

9.8CVSS8AI score0.00497EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/09 2:15 p.m.•14 views

CVE-2025-45885

PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries...

9.8CVSS5.9AI score0.00497EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/05/09 12:00 a.m.•34 views

CVE-2025-45885

PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries...

0.00497EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/05/09 12:00 a.m.•14 views

CVE-2025-45885

PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries...

9.8AI score0.00497EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/01 12:00 a.m.•14 views

PT-2025-18698 · Unknown · Phpgurukul Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID19 Testing Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul COVID19 Testing Management System. The issue affects some unknown functionality of the file /login.php. The...

9.8CVSS7.6AI score0.00639EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/05/01 12:00 a.m.•15 views

PHPGurukul COVID19 Testing Management System 安全漏洞

The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter Username in the file /login.php resulting in SQL injection. No details ...

9.8CVSS7.8AI score0.00639EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/04/29 5:31 p.m.•24 views

CVE-2025-4075 VMSMan login.php cross site scripting

A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Email with the input "alert1 leads to cross site scripting. The attack may be launched remotely. The...

5.3CVSS4.3AI score0.00417EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/04/14 7:00 a.m.•49 views

CVE-2025-3555 ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication

A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...

6.3CVSS0.00989EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/14 12:00 a.m.•15 views

eCommerce-website-in-PHP 安全漏洞

eCommerce-website-in-PHP is a free and open source php e-commerce platform for scriptandtools individual developers. A security vulnerability exists in eCommerce-website-in-PHP version 3.0, which stems from an improperly restricted authentication attempt in file /login.php...

8.1CVSS5AI score0.00989EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/04/09 11:00 a.m.•17 views

CVE-2017-20197 propanetank Roommate-Bill-Tracking login.php sql injection

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

7.5CVSS7.7AI score0.00392EPSS
SaveExploits0References3
OSV
OSV
•added 2025/04/04 1:15 a.m.•12 views

CVE-2025-3187

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS5.8AI score0.00562EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•9 views

PHPGurukul e-Diary Management System 安全漏洞

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the logindetail parameter of the login.php file. An attacker can...

9.8CVSS7.8AI score0.00562EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/03/24 8:00 p.m.•11 views

CVE-2025-2709 Yonyou UFIDA ERP-NC login.jsp cross site scripting

A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.jsp. The manipulation of the argument key/redirect leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose...

5.3CVSS6.4AI score0.00938EPSS
SaveExploits1References4
OSV
OSV
•added 2025/03/07 12:15 a.m.•11 views

CVE-2025-2050

A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched...

9.8CVSS5.8AI score0.00537EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/02/05 5:02 a.m.•11 views

CVE-2024-10733

A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS7.2AI score0.00652EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 4:57 a.m.•11 views

CVE-2024-10335

A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. T...

9.8CVSS7.5AI score0.00746EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:38 p.m.•16 views

CVE-2024-8081

A vulnerability classified as critical was found in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has...

9.8CVSS7.2AI score0.00606EPSS
SaveExploits1References1
Rows per page
Query Builder