CVE-2023-6655: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /wselfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument...

PT-2023-32731

Name of the Vulnerable Software and Affected Versions Hongjing e-HR 2020 Description A critical issue has been identified in Hongjing e-HR 2020. The problem resides in an unknown function within the file /w selfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the Login...

ColumbiaSoft Document Locator Security Vulnerability

ColumbiaSoft Document Locator is a document management system from ColumbiaSoft. A security vulnerability exists in ColumbiaSoft Document Locator versions prior to 7.2 SP4, which stems from the parameter Server in file/api/authentication/login can lead to incorrect authentication...

HANSUNCMS SQL Injection Vulnerability

HANSUNCMS is a website builder system from China HANSUN Technology HANSUN Company. HANSUNCMS v1.0 version of the existence of security vulnerabilities, the vulnerability stems from the component / ajax / ajaxlogin.ashx found to contain SQL injection vulnerability...

Ruijie Networks RG-EW1200G Authorization Issue Vulnerability

The Ruijie Networks RG-EW1200G is a wireless router from Ruijie Networks China. An authorization issue vulnerability exists in the Ruijie Networks RG-EW1200G, which stems from improper authentication in file/api/sys/login...

PT-2022-10653

Name of the Vulnerable Software and Affected Versions GRANDCOM DynWEB versions prior to 4.2 Description The issue allows a remote unauthenticated attacker to exploit a SQL Injection vulnerability in the admin login interface. This can lead to obtaining administrative access to the webpage,...

CVE-2021-37413: Improper Neutralization of Special Elements used in an SQL Command

GRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface. A remote unauthenticated attacker can exploit this vulnerability to obtain administrative access to the webpage, access the user database, modify web content and upload custom files. The backend login...

CVE-2022-26189

TOTOLINK N600R V4.3.0cu.7570B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface...

CVE-2022-26189

TOTOLINK N600R V4.3.0cu.7570B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface...

Command injection

TOTOLINK N600R V4.3.0cu.7570B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface...

PT-2022-17715

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7570 B20200620 Description A command injection issue was found via the langType parameter in the login interface. This allows for potential command injection attacks. Recommendations For TOTOLINK N600R version...

CVE-2022-26189: Improper Neutralization of Special Elements used in a Command

TOTOLINK N600R V4.3.0cu.7570B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface...

Solarwinds Serv-U Web Client input validation vulnerability

The Solarwinds Serv-U Web Client is an HTTP-based file transfer client from SolarWinds USA that is available to all users on licensed Serv-U file servers. An input validation error vulnerability exists in the Solarwinds Serv-U Web Client that stems from the Serv-U web login interface allowing...

OpenVPN Cross-Site Script Vulnerability

Openvpn OpenVPN is a software package from OpenVPN Openvpn Inc. that creates encrypted virtual private network VPN tunnels that use the OpenSSL library to encrypt data and control information and allow the created VPN to be authenticated using a public key, an electronic certificate, or a...

CVE-2021-22003

VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force the login endpoint, which may or may not be practical based on lockout policy configuration and...

Vmware Workspace One information leakage vulnerability

Vmware Vmware Workspace One is a platform for supporting cross-device applications for rapid delivery and management of applications from Vmware, USA. The platform, which includes VMware Horizon and VMware Horizon Cloud, integrates access control, application management, and multi-platform endpoi...

Logic Flaw Vulnerability in the Backend Management Login Interface of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system back-end management login interface has a logic flaw vulnerability that can be exploited by an attacker to violently break the administrator's password...

SQL Injection Vulnerability in the Login Interface of BodaTech Enterprise Website Management System

Liaocheng Boda Network Technology Co., Ltd. is mainly engaged in developing commercial websites. SQL injection vulnerability exists in the login interface of Boda's enterprise website management system, which can be exploited by attackers to obtain database information...

Logic Flaw Vulnerability in eXtplorer Login Interface

eXtplorer is a file management based on PHP and ExtJS development of the text based on PHP and ExtJS development of the file management of the file management device manager . A logic flaw vulnerability exists in the eXtplorer login interface, which can be exploited by an attacker to gain server...

CVE-2018-18285

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database...