PointOfSales SQL Injection Vulnerability

PointOfSales is a point of sale system. The system includes features such as inventory management, customer management and performance management. A SQL injection vulnerability exists in PointOfSales version 1.0. A remote attacker can exploit this vulnerability to view, add, modify, or delete...

Information Disclosure

kibana is vulnerable to information disclosure. An improperly initialized kibana login screen causes user-entered credentials to be shown in the URL bar and allows untrusted parties to obtain the user's credentials via access logs or through the Referer header when the user browses to another...

CVE-2018-18806

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...

CVE-2018-18806

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...

CVE-2018-18804

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

CVE-2018-18803

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb...

CVE-2018-18804

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

CVE-2018-18803

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb...

Sql injection

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...

Sql injection

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

Sql injection

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...

CVE-2018-18803

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb...

CVE-2018-18804

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

CVE-2018-18806

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...

CVE-2018-18803

CVE-2018-18803 corresponds to a SQL Injection in Curriculum Evaluation System 1.0, exploitable via the login screen. Technical details in connected records show the vulnerability stems from building SQL queries by string concatenation in code paths (e.g., frmCourse.vb and includes/user.vb), enabl...

CVE-2018-18804

CVE-2018-18804 affects Bakeshop Inventory System 1.0, with an SQL injection on the login screen due to the code path include/publicfunction.vb (string-concatenated SQL). CNVD-2019-00381 confirms a remote SQL injection vulnerability that enables an attacker to view, modify, or delete data in the b...

CVE-2018-18805

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...

PT-2018-14665

Name of the Vulnerable Software and Affected Versions Bakeshop Inventory System version 1.0 Description The issue is related to SQL injection via the login screen. It is connected to the include/publicfunction.vb file. Recommendations For Bakeshop Inventory System version 1.0, consider restrictin...

CVE-2018-18804: Improper Neutralization of Special Elements used in an SQL Command

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

CVE-2018-18806: Improper Neutralization of Special Elements used in an SQL Command

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...