CVE-2024-0474

A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit h...

Dormitory Management System SQL Injection Vulnerability

Dormitory Management System is a dormitory management system. A SQL injection vulnerability exists in code-projects Dormitory Management System version 1.0, which stems from a SQL injection vulnerability in the login.php file...

PT-2024-15591 · Code Projects · Dormitory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Dormitory Management System version 1.0 Description: A critical vulnerability was found in the Dormitory Management System. The issue affects an unknown functionality of the file login.php. The manipulation of the username...

Hospital Management System login.php File SQL Injection Vulnerability

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A SQL injection vulnerability exists in Hospital Management System version 1.0, which stems from a lack of validation of externally...

PT-2024-15494 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical issue has been found in the code-projects Simple Online Hotel Reservation System. The manipulation of the username and password arguments in the file...

PT-2024-15427 · Unknown · Kashipara Hotel Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Hospital Management System versions up to 1.0 Description: A critical vulnerability was found in the Parameter Handler component of the file login.php. The manipulation of the email and password arguments leads to SQL injection. The...

PT-2023-32932 · Unknown · Shipping 100 Fahuo100

Name of the Vulnerable Software and Affected Versions: Shipping 100 Fahuo100 versions up to 1.1 Description: A critical vulnerability has been found in Shipping 100 Fahuo100. The issue affects an unknown function of the file member/login.php. The manipulation of the argument M pwd leads to sql...

PT-2023-32891 · Unknown · Code-Projects College Notes Gallery

Name of the Vulnerable Software and Affected Versions: code-projects College Notes Gallery version 2.0 Description: A critical vulnerability has been found in the code-projects College Notes Gallery, affecting an unknown functionality of the file login.php. The manipulation of the user argument...

PT-2023-32880 · Unknown · Code-Projects Library Management System

Name of the Vulnerable Software and Affected Versions: code-projects Library Management System version 2.0 Description: A critical issue has been found in the processing of the file login.php, where the manipulation of the student argument leads to SQL injection. This issue can be exploited...

PT-2023-32735

Name of the Vulnerable Software and Affected Versions Campcodes Web-Based Student Clearance System version 1.0 Description A critical issue has been found in the system, affecting the processing of the file /libsystem/login.php. The manipulation of the student argument leads to SQL injection. The...

PT-2023-30731 · Unknown · Gaatitrack Courier Management System

Name of the Vulnerable Software and Affected Versions: GaatiTrack Courier Management System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to inject JavaScript via the page parameter to "login.php" or "header.php". This could potentially lead to unauthorized...

Code-Projects Blood Bank Security Breach

Code-Projects Blood Bank is a blood bank system from the Code-Projects project. A security vulnerability exists in Code-Projects Blood Bank version 1.0, which stems from an SQL injection vulnerability in the parameters hemail and hpassword of the file hospitalLogin.php...

Beijing Baichuo Smart S85F Management Platform Authorization Issues Vulnerability

Beijing Baichuo Smart S85F Management Platform is a management platform of Beijing Baichuo Company. An authorization issue vulnerability exists in Beijing Baichuo Smart S85F Management Platform version V31R02B10-01, which stems from an improper password reset in the parameter txtnewpwd in the fil...

CVE-2023-45018

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database...

PT-2023-32340 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue affects the processing of the file login.php, where the manipulation of the username argument leads to sql injection. The attack can be initiated...

The vulnerability of the cgi-bin/login.cgi file within the Sangfor NGAF firewall allows a hacker to execute arbitrary code.

The vulnerability of the cgi-bin/login.cgi file, exposed by the Sangfor NGAF firewall mechanism, is related to errors in processing the meta-symbolic cookie file in the PHPSESSID parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially...

Judging Management System SQL Injection Vulnerability

Judging Management System is a judging management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Judging Management System version 1.0, which stems from the parameter password in the file login.php that can lead to sql injection...

Schoolmate SQL Injection Vulnerability

Schoolmate is a PHP/MySQL solution for elementary, middle and high schools from mrmunkey22 Individual Developer. A security vulnerability exists in Schoolmate version 1.3, which was discovered to contain an SQL injection vulnerability via the $username variable of SESSION in ValidateLogin.php...

CVE-2023-3985

A vulnerability has been found in SourceCodester Online Jewelry Store 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has bee...

PT-2023-27133 · Sourcecodester · Sourcecodester Online Jewelry Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Jewelry Store version 1.0 Description: A critical issue has been found in the login.php file, where the manipulation of the username and password arguments leads to sql injection. The attack can be initiated remotely...