WordPress Plugin Directorist 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An input validation error vulnerability...

PT-2023-9893 · Unknown · Stars Alliance Psychostats

Name of the Vulnerable Software and Affected Versions: Stars Alliance PsychoStats versions up to 3.2.2a Description: A vulnerability has been found in Stars Alliance PsychoStats, affecting an unknown part of the file "upload/admin/login.php". The manipulation of the ref argument leads to cross-si...

PT-2023-20621 · Sourcecodester · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Internship Management System version 1.0 Description: A critical issue affects the file admin/login.php of the component POST Parameter Handler. The manipulation of the email argument leads to sql injection. The attack c...

CVE-2023-2093

A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2023-2073

A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Login.php. The manipulation of the argument password leads to sql injection. The attack can be...

PT-2023-17591 · Unknown · Campcodes Online Traffic Offense Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Traffic Offense Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /classes/Login.php. The manipulation of the password argument leads to s...

Campcodes Advanced Online Voting System SQL注入漏洞

Campcodes Advanced Online Voting System is an online voting system. Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter voter of the file login.php, which can be exploite...

PT-2023-17443 · Unknown · Campcodes Advanced Online Voting System

Name of the Vulnerable Software and Affected Versions: Campcodes Advanced Online Voting System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file login.php. The manipulation of the voter argument leads to sql injection. The attack c...

PT-2023-17357 · Sourcecodester · Sourcecodester Simple/Beautiful Shopping Cart System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple and Beautiful Shopping Cart System version 1.0 Description: A critical issue has been found in the processing of the file login.php, where the manipulation of the username and password arguments leads to SQL injection. T...

PT-2023-17256 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS versions up to 1.5.4 Description: A problematic issue was found in EyouCMS, affecting an unknown part of the file login.php. The manipulation of the tag tag argument leads to cross-site scripting. It is possible to initiate the attack...

EyouCMS 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A security vulnerability exists in EyouCMS versions prior to 1.5.4, which originates from an unknown function in the file login.php, leading to...

PT-2023-17202 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file login.php. The manipulation of the U USERNAME argument leads to sql injection. It is...

CVE-2023-1674

A vulnerability was found in SourceCodester School Registration and Fee System 1.0 and classified as critical. This issue affects some unknown processing of the file /bilal final/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. T...

TwoFactorAuth 输入验证错误漏洞

TwoFactorAuth is a two-factor authentication portal written in PHP by Arno0x Personal Developer. An input validation error vulnerability exists in Arno0x TwoFactorAuth, which originates in an unknown section of the file login/login.php and results in a redirect via the parameter from...

PT-2023-10349 · Unknown · Arno0X Twofactorauth

Name of the Vulnerable Software and Affected Versions: Arno0x TwoFactorAuth affected versions not specified Description: A problematic vulnerability has been found in Arno0x TwoFactorAuth, affecting an unknown part of the file login/login.php. The manipulation of the from argument leads to open...

PT-2023-17041 · Sourcecodester · Sourcecodester E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce System version 1.0 Description: A critical issue was found in the system, allowing for sql injection through the manipulation of the U USERNAME argument in an unknown function of the login.php file. This issue can be...

PT-2023-17017 · Unknown · Sourcecodester Monitoring Of Students Cyber Accounts System

Name of the Vulnerable Software and Affected Versions: SourceCodester Monitoring of Students Cyber Accounts System version 1.0 Description: A critical issue was found in the file login.php of the component POST Parameter Handler. The manipulation of the un argument leads to SQL injection. The...

CVE-2023-1368

A vulnerability was found in XHCMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component POST Parameter Handler. The manipulation of the argument user leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2023-16935 · Xhcms · Xhcms

Name of the Vulnerable Software and Affected Versions: XHCMS version 1.0 Description: A critical issue has been found in the POST Parameter Handler component of the login.php file, where the manipulation of the user argument leads to SQL injection. This issue can be initiated remotely...

CVE-2023-1358

A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknown part of the file /philosophy/admin/login.php of the component POST Parameter Handler. The manipulation of the argument useremail leads to sql injection. ...