ServiceTonic Helpdesk Software 安全特征问题漏洞

ServiceTonic is an ITIL-compliant service desk and enterprise services software. serviceTonic versions prior to 9.0.35937 are vulnerable to an improper access control vulnerability. An attacker could exploit this vulnerability to gain unauthorized access to the system via the login form, allowing...

Sourcecodester Engineers Online Portal SQL Injection Vulnerability

Sourcecodester Engineers Online Portal is an open source online portal. Sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to bypass authentication via the login form in index.php...

PT-2021-17713

Name of the Vulnerable Software and Affected Versions: ServiceTonic Helpdesk software versions prior to 9.0.35937 Description: The issue allows for unauthorized system access through the login form, enabling an attacker to log in without using a password. Recommendations: For versions prior to...

PT-2021-17711

Name of the Vulnerable Software and Affected Versions: ServiceTonic Helpdesk software versions prior to 9.0.35937 Description: The issue allows an attacker to exfiltrate information via specially crafted HQL-compatible time-based SQL queries using blind SQL injection in the login form...

CVE-2021-28022: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL injection in the login form in ServiceTonic Helpdesk software 9.0.35937 allows attacker to exfiltrate information via specially crafted HQL-compatible time-based SQL queries...

CVE-2021-42665

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication...

CVE-2021-42665

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication...

CVE-2021-42665

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication...

Sql injection

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication...

CVE-2021-42665

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication...

PT-2021-23509

Name of the Vulnerable Software and Affected Versions PHP Event Calendar versions prior to 2021-09-03 Description The issue allows SQL injection, as demonstrated by the "/server/ajax/user manager.php" endpoint, specifically the username parameter. This can be used to execute SQL statements direct...

Login Form Bruteforced

The scanner successfully authenticated on the target web application by using predictable credentials on its login form. Note that this plugin requires enabling the 'Credentials Bruteforcing' scan option and configuring working login form credentials. No source data...

GHSA-W7X8-CQ7R-G5G9 Cross Site Scripting in Microweber

Cross Site Scripting XSS. vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form...

Cross Site Scripting in Microweber

Cross Site Scripting XSS. vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form...

CVE-2021-41171 Bypass bruteforce protection on login form in elabftw

eLabFTW is an open source electronic lab notebook manager for research teams. In versions of eLabFTW before 4.1.0, it allows attackers to bypass a brute-force protection mechanism by using many different forged PHPSESSID values in HTTP Cookie header. This issue has been addressed by implementing...

CVE-2021-42169

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...

Sql injection

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...

Cross-Site Scripting (XSS)

microweber/microweber is vulnerable to Cross-Site Scripting XSS.The vulnerability exists because a remote attacker is able to inject and execute malicious Javascript via the Login form by inserting code in the request form...

CVE-2021-33988

Cross Site Scripting XSS. vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form...

CVE-2021-33988

Cross Site Scripting XSS. vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form...