PT-2025-22843 · Unknown · Scriptandtools Real-Estate-Website-In-Php

Name of the Vulnerable Software and Affected Versions: ScriptAndTools Real-Estate-website-in-PHP version 1.0 Description: A critical vulnerability was found in the Admin Login Panel of the ScriptAndTools Real-Estate-website-in-PHP. The manipulation of the Password argument leads to SQL injection...

CVE-2024-0343

A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6. Affected by this vulnerability is an unknown functionality of the component Login Panel. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2024-9928

A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts. If exploited, this could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the equipment login. Note that the system supports onl...

CVE-2023-27098

TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel...

CVE-2021-33256

A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. The jusername parameter seems to be vulnerable and a reverse shell could be obtained if a privileged user exports "User Attempts Audit Repor...

CVE-2021-45744

A Stored Cross Site Scripting XSS vulnerability exists in bludit 3.13.1 via the TAGS section in login panel...

CVE-2021-45745

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

CVE-2020-35276

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user...

CVE-2020-25514

Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:///lms/admin.php...

CVE-2024-13147

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025...

CVE-2024-13147

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025...

CVE-2024-13147

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025...

CVE-2024-13147 SQLi in Merkur Software's B2B Login Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025...

CVE-2024-13147 SQLi in Merkur Software's B2B Login Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025...

CVE-2024-13147

CVE-2024-13147 describes an SQL Injection in Merkur Software’s B2B Login Panel. The vulnerability stems from improper neutralization of special elements in SQL queries, affecting the B2B Login Panel prior to 15.01.2025. Documents consistently identify this as a SQLi flaw with high potential impac...

Merkur Software B2B Login Panel SQL注入漏洞

Merkur Software B2B Login Panel is a B2B login panel from Merkur Software. A SQL injection vulnerability exists in Merkur Software B2B Login Panel versions prior to 15.01.2025 that stems from the presence of SQL injection...

CVE-2025-0458

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can...

CVE-2025-0458

CVE-2025-0458 affects Virtual Computer Vysual RH Solution 2024.12.1, where the Login Panel’s /index.php contains vulnerable functionality. The described issue arises from manipulating the page argument, enabling remote cross-site scripting (XSS). The vulnerability is publicly disclosed and attack...

CVE-2025-0458 Virtual Computer Vysual RH Solution Login Panel index.php cross site scripting

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can...

CVE-2025-0458 Virtual Computer Vysual RH Solution Login Panel index.php cross site scripting

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can...