CVE-2021-27758

There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account...

CVE-2021-27758

There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account...

Cross site request forgery (csrf)

There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account...

CVE-2021-27758

CVE-2021-27758 describes a CSRF vulnerability in a login form that can be exploited to spam or force login-related actions, potentially blocking a legitimate user’s access. The connected records identify the affected product as HCL BigFix Platform and describe the issue as a login CSRF flaw that ...

CVE-2021-27758: Cross-Site Request Forgery (CSRF)

There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account...

PT-2022-9847

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to Cross-site Request Forgery in the login form. It prevents a user from logging in after an attacker spams the login, resulting in the system blocking the victim...

GHSA-54QJ-48VX-CR9F Django Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

Django Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

CVE-2021-27758

There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account...

SUSE openSUSE 安全漏洞

openSUSE is a set of Linux-based free operating systems and open source community projects from SUSE Germany. openSUSE Build service login-proxy-scripts dc000cdfe9b9b715fb92195b1a57559362f689ef A security vulnerability exists in previous versions that allows an attacker to provide the user with t...

PT-2022-13144

Name of the Vulnerable Software and Affected Versions Crazy Bone WordPress plugin versions prior to 0.6.1 Description The issue arises from the lack of sanitization and escaping of the username submitted via the login form when displaying it back in the log dashboard. This leads to an...

BulletProof Security < 5.8 - Admin+ Stored Cross-Site Scripting (XSS)

The plugin does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. As admin, put the following payloads: - in the htaccess File Options htaccess File Editor...

Mageia: Security Advisory (MGASA-2017-0429)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44092: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...

CVE-2021-44653

Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application...

CVE-2021-44655

Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to get admin access on the application...

CVE-2021-44653: Improper Neutralization of Special Elements used in an SQL Command

Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application...

CVE-2021-44655: Improper Neutralization of Special Elements used in an SQL Command

Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to get admin access on the application...

PT-2021-24140 · Unknown · Online Magazine Management System

Name of the Vulnerable Software and Affected Versions: Online Magazine Management System version 1.0 Description: The issue concerns a SQL injection authentication bypass. The Admin panel authentication can be bypassed due to a SQL injection vulnerability in the login form, allowing an attacker t...

CVE-2021-24954

The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not sanitise and escape the ppressccdata parameter before outputting it back in an attribute of an admin dashboard page, leading to a Reflected Cross-Site Scripting issue...