PT-2024-15427 · Unknown · Kashipara Hotel Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Hospital Management System versions up to 1.0 Description: A critical vulnerability was found in the Parameter Handler component of the file login.php. The manipulation of the email and password arguments leads to SQL injection. The...

PT-2023-32932 · Unknown · Shipping 100 Fahuo100

Name of the Vulnerable Software and Affected Versions: Shipping 100 Fahuo100 versions up to 1.1 Description: A critical vulnerability has been found in Shipping 100 Fahuo100. The issue affects an unknown function of the file member/login.php. The manipulation of the argument M pwd leads to sql...

PT-2023-32891 · Unknown · Code-Projects College Notes Gallery

Name of the Vulnerable Software and Affected Versions: code-projects College Notes Gallery version 2.0 Description: A critical vulnerability has been found in the code-projects College Notes Gallery, affecting an unknown functionality of the file login.php. The manipulation of the user argument...

PT-2023-32880 · Unknown · Code-Projects Library Management System

Name of the Vulnerable Software and Affected Versions: code-projects Library Management System version 2.0 Description: A critical issue has been found in the processing of the file login.php, where the manipulation of the student argument leads to SQL injection. This issue can be exploited...

PT-2023-32735 · Unknown · Campcodes Web-Based Student Clearance System

Name of the Vulnerable Software and Affected Versions: Campcodes Web-Based Student Clearance System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /libsystem/login.php. The manipulation of the student argument leads to SQL injection. T...

PT-2023-30731 · Unknown · Gaatitrack Courier Management System

Name of the Vulnerable Software and Affected Versions: GaatiTrack Courier Management System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to inject JavaScript via the page parameter to "login.php" or "header.php". This could potentially lead to unauthorized...

Code-Projects Blood Bank Security Breach

Code-Projects Blood Bank is a blood bank system from the Code-Projects project. A security vulnerability exists in Code-Projects Blood Bank version 1.0, which stems from an SQL injection vulnerability in the parameters hemail and hpassword of the file hospitalLogin.php...

Beijing Baichuo Smart S85F Management Platform Authorization Issues Vulnerability

Beijing Baichuo Smart S85F Management Platform is a management platform of Beijing Baichuo Company. An authorization issue vulnerability exists in Beijing Baichuo Smart S85F Management Platform version V31R02B10-01, which stems from an improper password reset in the parameter txtnewpwd in the fil...

CVE-2023-45018

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database...

PT-2023-32340 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue affects the processing of the file login.php, where the manipulation of the username argument leads to sql injection. The attack can be initiated...

The vulnerability of the cgi-bin/login.cgi file within the Sangfor NGAF firewall allows a hacker to execute arbitrary code.

The vulnerability of the cgi-bin/login.cgi file, exposed by the Sangfor NGAF firewall mechanism, is related to errors in processing the meta-symbolic cookie file in the PHPSESSID parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially...

Judging Management System SQL Injection Vulnerability

Judging Management System is a judging management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Judging Management System version 1.0, which stems from the parameter password in the file login.php that can lead to sql injection...

Schoolmate SQL Injection Vulnerability

Schoolmate is a PHP/MySQL solution for elementary, middle and high schools from mrmunkey22 Individual Developer. A security vulnerability exists in Schoolmate version 1.3, which was discovered to contain an SQL injection vulnerability via the $username variable of SESSION in ValidateLogin.php...

CVE-2023-3985

A vulnerability has been found in SourceCodester Online Jewelry Store 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has bee...

PT-2023-27133 · Sourcecodester · Sourcecodester Online Jewelry Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Jewelry Store version 1.0 Description: A critical issue has been found in the login.php file, where the manipulation of the username and password arguments leads to sql injection. The attack can be initiated remotely...

WordPress Plugin Directorist 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An input validation error vulnerability...

PT-2023-9893 · Unknown · Stars Alliance Psychostats

Name of the Vulnerable Software and Affected Versions: Stars Alliance PsychoStats versions up to 3.2.2a Description: A vulnerability has been found in Stars Alliance PsychoStats, affecting an unknown part of the file "upload/admin/login.php". The manipulation of the ref argument leads to cross-si...

PT-2023-20621 · Sourcecodester · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Internship Management System version 1.0 Description: A critical issue affects the file admin/login.php of the component POST Parameter Handler. The manipulation of the email argument leads to sql injection. The attack c...

CVE-2023-2093

A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2023-2073

A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Login.php. The manipulation of the argument password leads to sql injection. The attack can be...