272 matches found
PT-2024-15793 · Unknown · Efs Easy File Sharing Ftp
Name of the Vulnerable Software and Affected Versions: EFS Easy File Sharing FTP version 3.6 Description: A problematic vulnerability has been found in the Login component of the software. The manipulation of the password argument leads to denial of service. This issue can be exploited remotely...
Xlight FTP Security Vulnerability
Xlight FTP is a high performance and easy to use FTP server software from Xlight FTP. It makes file transfer secure and easy to use. A security vulnerability exists in Xlight FTP version 1.1, which stems from a denial of service caused by the parameter user of the component Login...
PT-2024-15794 · Unknown · Xlight Ftp Server
Name of the Vulnerable Software and Affected Versions: Xlightftpd Xlight FTP Server version 1.1 Description: A problematic vulnerability was found in the Login component, where the manipulation of the user argument leads to denial of service. The attack can be initiated remotely. Recommendations:...
PT-2024-15456 · Guangzhou Yingke Electronic Technology · Ncast
Name of the Vulnerable Software and Affected Versions: Guangzhou Yingke Electronic Technology Ncast versions up to 2017 Description: A vulnerability was found in Guangzhou Yingke Electronic Technology Ncast, affecting some unknown functionality of the file /manage/IPSetup.php of the component Gue...
CVE-2023-7127
A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...
Sql injection
A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...
CVE-2023-5794
A vulnerability was found in PHPGurukul Online Railway Catering System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to launch the attack...
PT-2023-32332 · Unknown · Phpgurukul Online Railway Catering System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Railway Catering System version 1.0 Description: A critical issue was found in the Login component of the PHPGurukul Online Railway Catering System. The manipulation of the username argument leads to SQL injection. This issu...
CVE-2023-43468
SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component...
CVE-2023-43468
SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component...
CVE-2023-43468
SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component...
CVE-2023-3805
A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...
PT-2023-26266 · Unknown · Xiamen Four Letter Video Surveillance Management System
Name of the Vulnerable Software and Affected Versions: Xiamen Four Letter Video Surveillance Management System versions up to 20230712 Description: A critical issue has been found in the library UserInfoAction.class of the component Login, affecting some unknown processing. This leads to improper...
CVE-2023-3208
A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...
PT-2023-23591 · Unknown · Roadflow Visual Process Engine
Name of the Vulnerable Software and Affected Versions: RoadFlow Visual Process Engine .NET Core Mvc version 2.13.3 Description: A critical issue has been found in the Login component of the affected software, specifically in the file "/Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=ta...
IDURAR ERP/CRM SQL注入漏洞
IDURAR ERP/CRM is an open source content management system by Salah Eddine Lalami Individual Developer. A security vulnerability exists in IDURAR ERP/CRM v1, which was discovered to contain an SQL injection vulnerability via components/api/login...
PT-2023-16366 · Unknown · Phpgurukul Bank Locker Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1.0 Description: A critical issue affects the Login component of the PHPGurukul Bank Locker Management System, specifically the file index.php. The manipulation of the username argument leads t...
CVE-2017-20164
A vulnerability was found in Symbiote Seed up to 6.0.2. It has been classified as critical. Affected is the function onBeforeSecurityLogin of the file code/extensions/SecurityLoginExtension.php of the component Login. The manipulation of the argument URL leads to open redirect. It is possible to...
Sql injection
A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file app/config/passport.js of the component Login. The manipulation of the argument id/email leads to sql injection. The name of the patch is...
CVE-2021-4290
CVE-2021-4290 affects the DHBW Fallstudie login flow, specifically an unknown functionality in the file app/config/passport.js. The vulnerability arises from manipulation of the id/email parameter, leading to SQL injection. A patch named 5c13c6a972ef4c07c5f35b417916e0598af9e123 is recommended to ...