CVE-2025-3148

A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been...

CVE-2025-3148

The CVE-2025-3148 entry refers to Codeprojects Product Management System version 1.0. Affected component: Login. Root cause: manipulation of the Str1 argument leads to a buffer overflow. Impact is described as potentially compromising confidentiality, integrity, and availability; exploitation is ...

CVE-2025-3148 codeprojects Product Management System Login buffer overflow

A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been...

PT-2025-14603 · Unknown · Code-Projects Product Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Product Management System version 1.0 Description: A vulnerability was found in the codeprojects Product Management System, classified as problematic. This issue affects some unknown processing of the component Login. The...

CVE-2024-6745

A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown function of the file adminauthenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. It is possible to launch the attack...

PT-2025-4078 · Cianet · Cianet Onu Gw24Ac

Name of the Vulnerable Software and Affected Versions: Cianet ONU GW24AC versions up to 20250127 Description: A problem has been detected in the Login component of the affected software, where the manipulation of the browserLang argument leads to cross-site scripting. This issue can be exploited...

PT-2025-4072 · Unknown · 1000 Projects Employee Task Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Employee Task Management System version 1.0 Description: A critical issue affects the Login component of the system, specifically the file /index.php. The manipulation of the email argument leads to sql injection. This issue can...

PT-2025-4068 · Unknown · Needyamin Library Card System

Name of the Vulnerable Software and Affected Versions: needyamin Library Card System version 1.0 Description: A critical issue affects some unknown processing of the file admin.php of the component Login. The manipulation of the email/password argument leads to SQL injection. The attack may be...

PT-2025-3842 · Code Projects · Code-Projects Admission Management System

Name of the Vulnerable Software and Affected Versions: code-projects Admission Management System version 1.0 Description: A critical issue has been found in the Login component of the system, specifically in the file index.php. The manipulation of the u id argument leads to SQL injection. This...

CVE-2024-13038

A vulnerability was found in CodeAstro Simple Loan Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be...

Code-Projects Hospital Management System 注入漏洞

Hospital Management System a hospital management system. Hospital Management System has a SQL injection vulnerability that originates from the manipulation of username/password parameters in the login component of the /admin/index.php file. No details of the vulnerability are available at this ti...

CVE-2024-12663

A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The...

CVE-2024-51213

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2024-51213

CVE-2024-51213 is a cross-site scripting vulnerability in Online Shop Store v1.0, exploitable via the login.php component. A remote attacker could cause arbitrary code execution as described in the entry, with CVSS 3.1 base score 6.1 (MEDIUM) and network access, no privileges, user interaction re...

CVE-2024-51213

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2024-48654

Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted script to the login.php component...

CVE-2024-48654

Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted script to the login.php component...

CVE-2024-48654

Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted script to the login.php component...

CVE-2024-48644

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...

CVE-2024-48644

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...