CVE-2022-4855

A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2022-28051 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Blood Bank Management System version 1.0 Description: A critical issue affects the processing of the file login.php, where the manipulation of the username and password arguments leads to SQL injection. The attack can be...

PT-2022-11628 · Unknown · Phpredisadmin

Name of the Vulnerable Software and Affected Versions: phpRedisAdmin versions up to 1.17.3 phpRedisAdmin versions up to 1.16.1 can be simplified to the above line as 1.17.3 includes all versions up to 1.16.1, so the final output is: phpRedisAdmin versions up to 1.17.3 Description: A vulnerability...

CVE-2022-3583

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2022-22967 · Sourcecodester · Sourcecodester Canteen Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Canteen Management System version 1.0 Description: A critical issue has been discovered, affecting the login.php file. The business argument is vulnerable to SQL injection, which can be exploited remotely. Recommendations: For...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A security vulnerability exists in Canteen Management System version 1.0, which stems from unknown code in the file login.php is affected, and manipulation of the parameter business may result in sql...

Cashier Queuing System 安全漏洞

Cashier Queuing System is a cashier queuing system by Carlo Montero Personal Developer. A security vulnerability exists in Cashier Queuing System version 1.0, which stems from unknown code in the file /queuing/login.php is affected, and manipulation of the parameter username/password can lead to...

PT-2022-20675 · Unknown · Codeprojects Online Driving School

Name of the Vulnerable Software and Affected Versions: codeprojects Online Driving School affected versions not specified Description: A critical issue has been found in the codeprojects Online Driving School, affecting the /login.php file. The manipulation of the username argument leads to SQL...

CVE-2022-3120

A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be launch...

PT-2022-19010 · Sourcecodester · Sourcecodester Gym Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gym Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Gym Management System, affecting the file login.php. The manipulation of the user email argument leads to...

EUVD-2022-38403

DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php...

PT-2022-18343 · Sourcecodester · Sourcecodester Gym Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gym Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Gym Management System, affecting an unknown functionality of the file /mygym/admin/login.php. The...

PT-2022-18088 · Unknown · Sourcecodester Simple Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Food Ordering System version 1.0 Description: A problematic issue was found in the system, affecting the /login.php file. The manipulation of the email and password arguments with the input "alert1 leads to cross-site...

PT-2022-18085 · Sourcecodester · Sourcecodester One Church Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Church Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection. This is achieved by manipulating the username argument in the /login.php file with a specifically crafted input...

CVE-2022-2467

A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username with the input [email protected]' AND SELECT 6427 FROM SELECTSLEEP5LwLu AND 'hsvT'='hsvT leads ...

PT-2022-12352 · Unknown · Sourcecodester Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Cold Storage Management System using PHP/OOP version 1.0 Description: An SQL Injection issue exists via the username field in "login.php". This allows for potential exploitation. No information is provided about the...

FUEL CMS 跨站请求伪造漏洞

FUEL CMS is a CodeIgniter-based content management system. a cross-site request forgery vulnerability exists in login.php in FUEL CMS version 1.5.0. No details of the vulnerability are provided at this time...

CVE-2019-14453

An issue was discovered in Comelit "App lejos de casa web" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges installer or administrator for the graphical interface via a...

TestLink has an unspecified vulnerability

TestLink is the TestLink team's set of open source software for managing the software testing process and providing statistical analysis. An unspecified vulnerability exists in TestLink. An attacker can exploit this vulnerability to obtain credentials in plaintext with the 'viewer' parameter of t...

Linux: USERGROUP_ENAB in /etc/login.defs

su allows to run commands with a substitute user and group ID. When called with no user specified, su defaults to running an interactive shell as root. When user is specified, additional arguments can be supplied, in which case they are passed to the shell. USERGROUPSENAB enables setting of the...