CVE-2020-29228

CVE-2020-29228 affects EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability is a SQL injection on the User Login Page, arising from insufficient input validation on login parameters. Multiple connected sources (Red Hat, CNVD, CVE listings) corroborate the same ...

CVE-2020-29228

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page...

Egavilanmedia User Registration & Login System SQL注入漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A SQL injection vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel version 1.0, which stems from a lack of validation of external...

Phpgurukul User Registration Login Management System Cross-Site Request Forgery Vulnerability

Phpgurukul User Registration Login Management System is a website builder for user management by the PHPGurukul Phpgurukul team. A cross-site request forgery vulnerability exists in version 2.1 of the PHPGurukul User Registration & Login and User Management System, which originates on the User...

CVE-2020-35273

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery CSRF to remotely gain privileges in the User Profile panel. An attacker can update any user's account...

Cross site request forgery (csrf)

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery CSRF to remotely gain privileges in the User Profile panel. An attacker can update any user's account...

CVE-2020-35273

CVE-2020-35273 affects EgavilanMedia User Registration & Login System with Admin Panel 1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) that can remotely gain privileges in the User Profile panel, allowing an attacker to update any user’s account. Root cause stated in the sources is ...

CVE-2020-35273

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery CSRF to remotely gain privileges in the User Profile panel. An attacker can update any user's account...

EgavilanMedia User Registration And Login System With Admin Panel 1.0 CSRF

Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - CSRF Date: 01-12-2020 Exploit Author: Hardik Solanki Vendor Homepage: http://egavilanmedia.com Software Link:...

EgavilanMedia User Registration And Login System With Admin Panel 1.0 XSS

Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting Exploit Author: Soushikta Chowdhury Vendor Homepage: http://egavilanmedia.com Software Link: http://egavilanmedia.com/user-registration-and-login-system-with-admin-panel/ Version: 1.0...

WebDamn User Registration And Login System With User Panel SQL Injection

Exploit Title: WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass Date: 18-11-2020 Exploit Author: Aakash Madaan Vendor Homepage: https://webdamn.com/ Software Link : https://webdamn.com/user-management-system-with-php-mysql/ Version: N/A Default Tested on: Windows 10...

WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass

Exploit Title: WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass Date: 18-11-2020 Exploit Author: Aakash Madaan Vendor Homepage: https://webdamn.com/ Software Link : https://webdamn.com/user-management-system-with-php-mysql/ Version: N/A Default Tested on: Windows 10...

Nintendo Confirms Breach of 160,000 Accounts

Nintendo said over 160,000 accounts have been hacked, due to attackers abusing a legacy login system. Over the past few weeks, Nintendo gamers have been reporting suspicious activities on their accounts. According to the complaints, aired out on Twitter and Reddit, unauthorized actors were loggin...

Part-DB 0.4 Authentication Bypass

Exploit Title: Part-DB 0.4 - Authentication Bypass Date: 2019-10-26 Author: Marvoloo Vendor Homepage: https://github.com/Part-DB/Part-DB/ Software Link: https://github.com/Part-DB/Part-DB/archive/master.zip Version: 0.4 Tested on: Linux CVE : N/A Discription: Easy authentication bypass...

Information Disclosure

phpmyadmin is vulnerable to information disclosure. An attacker with access to the login system and configuration storage tables is able to retrieve local files due to an error in the transformation feature...

CVE-2018-19968

An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature. The attacker must have access to the phpMyAdmin Configuration Storage tables, although these can easily be created in any database to which the attacker has...

Google Login Security for High-Risk Users

Google has a new login service for high-risk users. It's good, but unforgiving. Logging in from a desktop will require a special USB key, while accessing your data from a mobile device will similarly require a Bluetooth dongle. All non-Google services and apps will be exiled from reaching into yo...

Xavier SQL Injection Vulnerability

Xavier - PHP is a login script and user management administration panel. Xavier suffers from a SQL injection vulnerability. Allows attackers to exploit the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in vigocam Network Camera Login System

Veco Technology Hangzhou Co., Ltd. is a webcam manufacturer. A SQL injection vulnerability exists in the vigocam network camera login system. The vulnerability allows attackers to exploit the vulnerability to gain access to sensitive database information...

Command Execution Vulnerability in NETRUN VPN Internet Behavior Management Router Login System

Nanjing Runye Technology Co., Ltd. specializes in computer software, hardware research and development, sales and system integration. A command execution vulnerability exists in the NETRUN VPN Internet Behavior Management Router login system. It allows attackers to remotely execute commands and...