Lucene search
+L

212 matches found

OSV
OSV
added 2024/01/09 8:15 p.m.5 views

CVE-2024-0343

A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6. Affected by this vulnerability is an unknown functionality of the component Login Panel. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

6.1CVSS3.6AI score0.00717EPSS
Exploits1References3
NVD
NVD
added 2024/01/09 8:15 p.m.21 views

CVE-2024-0343

A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6. Affected by this vulnerability is an unknown functionality of the component Login Panel. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

6.1CVSS4.8AI score0.00717EPSS
Exploits1References3
Prion
Prion
added 2024/01/09 8:15 p.m.24 views

Cross site scripting

A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6. Affected by this vulnerability is an unknown functionality of the component Login Panel. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

5CVSS6.5AI score0.00717EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2024/01/09 7:31 p.m.32 views

CVE-2024-0343 CodeAstro Simple House Rental System Login Panel cross site scripting

A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6. Affected by this vulnerability is an unknown functionality of the component Login Panel. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

5CVSS6.2AI score0.00717EPSS
Exploits1References3
OSV
OSV
added 2024/01/09 2:15 a.m.8 views

CVE-2023-27098

TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel...

7.5CVSS5.7AI score0.00376EPSS
Exploits1References4
NVD
NVD
added 2024/01/09 2:15 a.m.27 views

CVE-2023-27098

TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel...

7.5CVSS7.6AI score0.00376EPSS
Exploits1References2
Prion
Prion
added 2024/01/09 2:15 a.m.19 views

Hardcoded credentials

TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel...

5CVSS7.2AI score0.00376EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/01/09 12:0 a.m.31 views

CVE-2023-27098

TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel...

7.8AI score0.00376EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.5 views

CodeAstro Simple House Rental System Cross-Site Scripting Vulnerability

CodeAstro Simple House Rental System is a simple project based on an online house rental system. A cross-site scripting vulnerability exists in CodeAstro Simple House Rental System version 5.6, which stems from a cross-site scripting XSS vulnerability in the Login Panel component...

6.1CVSS5.8AI score0.00717EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.5 views

PT-2024-15479 · Codeastro · Codeastro Simple House Rental System

Name of the Vulnerable Software and Affected Versions: CodeAstro Simple House Rental System version 5.6 Description: A problematic vulnerability was found in the Login Panel component, allowing for cross-site scripting. The attack can be launched remotely. Recommendations: For CodeAstro Simple...

6.1CVSS6.6AI score0.00717EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.7 views

PT-2024-1678

Name of the Vulnerable Software and Affected Versions TP-Link Tapo APK up to v2.12.703 Description The issue is related to the use of hardcoded credentials for access to the login panel in the TP-Link Tapo APK. This allows a remote attacker to gain unauthorized access to protected information. Th...

7.8CVSS7AI score0.00376EPSS
Exploits1References11
CNVD
CNVD
added 2024/01/05 12:0 a.m.11 views

Small CRM Users login panel SQL Injection Vulnerability

Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the Users login panel. No details of the vulnerability are available at this time...

9.8CVSS8.1AI score0.00629EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/12/29 9:15 p.m.3 views

CVE-2023-50035

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...

9.8CVSS7.5AI score0.00629EPSS
Exploits1References2
OSV
OSV
added 2023/12/29 9:15 p.m.8 views

CVE-2023-50035

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...

9.8CVSS5.9AI score0.00629EPSS
Exploits1References1
NVD
NVD
added 2023/12/29 9:15 p.m.29 views

CVE-2023-50035

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...

9.8CVSS0.00629EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/12/29 12:0 a.m.7 views

PHPGurukul Small CRM 安全漏洞

Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the Users login panel. No details of the vulnerability are available at this time...

9.8CVSS8AI score0.00629EPSS
Exploits1References2
CVE
CVE
added 2023/12/29 12:0 a.m.55 views

CVE-2023-50035

CVE-2023-50035 affects PHPGurukul Small CRM 3.0. The issue is a SQL Injection in the Users login panel caused by directly using the password parameter in SQL queries without sanitization, enabling payload execution. The CVSSv3.1 base score is 9.8 (CRITICAL). Some connected sources (PT Security) d...

9.8CVSS9.7AI score0.00629EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/29 12:0 a.m.9 views

PT-2023-31458 · Unknown · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 3.0 Description: The issue is related to SQL Injection on the Users login panel. This occurs because the password parameter is directly used in the SQL query without any sanitization, allowing the SQL Injection...

9.8CVSS9.5AI score0.00629EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2023/10/17 12:0 a.m.14 views

Pimcore Admin Login Cross-Site Scripting

Pimcore is an open-source enterprise software written in PHP and offering multiple features like product information, customer data, digital assets or content management. Pimcore versions before 10.5.21 suffer from a Cross-Site Scripting XSS vulnerability in the admin panel login through the...

7.3CVSS6.3AI score0.0109EPSS
Exploits1References3
Packet Storm
Packet Storm
added 2023/09/12 12:0 a.m.272 views

Kylin CMS 1.3.0 SQL Injection

==================================================================================================================================== | Title : KylinCMS V1.3.0 Auth by pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.332-bit | |...

7.1AI score
Exploits0
Rows per page
Query Builder