Lucene search
+L

272 matches found

Positive Technologies
Positive Technologies
added 2024/01/19 12:00 a.m.16 views

PT-2024-15793 · Unknown · Efs Easy File Sharing Ftp

Name of the Vulnerable Software and Affected Versions: EFS Easy File Sharing FTP version 3.6 Description: A problematic vulnerability has been found in the Login component of the software. The manipulation of the password argument leads to denial of service. This issue can be exploited remotely...

7.5CVSS7AI score0.00985EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/01/19 12:00 a.m.28 views

Xlight FTP Security Vulnerability

Xlight FTP is a high performance and easy to use FTP server software from Xlight FTP. It makes file transfer secure and easy to use. A security vulnerability exists in Xlight FTP version 1.1, which stems from a denial of service caused by the parameter user of the component Login...

7.5CVSS6.7AI score0.04195EPSS
SaveExploits3References6
Positive Technologies
Positive Technologies
added 2024/01/19 12:00 a.m.18 views

PT-2024-15794 · Unknown · Xlight Ftp Server

Name of the Vulnerable Software and Affected Versions: Xlightftpd Xlight FTP Server version 1.1 Description: A problematic vulnerability was found in the Login component, where the manipulation of the user argument leads to denial of service. The attack can be initiated remotely. Recommendations:...

7.5CVSS7AI score0.04195EPSS
SaveExploits3References7
Positive Technologies
Positive Technologies
added 2024/01/08 12:00 a.m.17 views

PT-2024-15456 · Guangzhou Yingke Electronic Technology · Ncast

Name of the Vulnerable Software and Affected Versions: Guangzhou Yingke Electronic Technology Ncast versions up to 2017 Description: A vulnerability was found in Guangzhou Yingke Electronic Technology Ncast, affecting some unknown functionality of the file /manage/IPSetup.php of the component Gue...

7.5CVSS6.2AI score0.66932EPSS
SaveExploits2References11
OSV
OSV
added 2023/12/28 3:15 p.m.15 views

CVE-2023-7127

A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...

9.8CVSS5.6AI score0.0072EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/28 3:15 p.m.26 views

Sql injection

A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...

5.8CVSS7.8AI score0.0072EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/10/26 6:15 p.m.9 views

CVE-2023-5794

A vulnerability was found in PHPGurukul Online Railway Catering System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to launch the attack...

9.8CVSS5.7AI score0.00711EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/10/26 12:00 a.m.13 views

PT-2023-32332 · Unknown · Phpgurukul Online Railway Catering System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Railway Catering System version 1.0 Description: A critical issue was found in the Login component of the PHPGurukul Online Railway Catering System. The manipulation of the username argument leads to SQL injection. This issu...

9.8CVSS8AI score0.00711EPSS
SaveExploits1References8
OSV
OSV
added 2023/09/23 12:15 a.m.10 views

CVE-2023-43468

SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component...

9.8CVSS6.2AI score0.01247EPSS
SaveExploits1References3
NVD
NVD
added 2023/09/23 12:15 a.m.21 views

CVE-2023-43468

SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component...

9.8CVSS9.8AI score0.01247EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/09/22 12:00 a.m.35 views

CVE-2023-43468

SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component...

9.9AI score0.01247EPSS
SaveExploits1References3
OSV
OSV
added 2023/07/21 2:15 a.m.8 views

CVE-2023-3805

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...

9.8CVSS5.2AI score0.00948EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/07/21 12:00 a.m.7 views

PT-2023-26266 · Unknown · Xiamen Four Letter Video Surveillance Management System

Name of the Vulnerable Software and Affected Versions: Xiamen Four Letter Video Surveillance Management System versions up to 20230712 Description: A critical issue has been found in the library UserInfoAction.class of the component Login, affecting some unknown processing. This leads to improper...

9.8CVSS6.9AI score0.00948EPSS
SaveExploits1References7
OSV
OSV
added 2023/06/12 3:15 p.m.9 views

CVE-2023-3208

A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...

8.8CVSS5.7AI score0.0073EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/06/12 12:00 a.m.9 views

PT-2023-23591 · Unknown · Roadflow Visual Process Engine

Name of the Vulnerable Software and Affected Versions: RoadFlow Visual Process Engine .NET Core Mvc version 2.13.3 Description: A critical issue has been found in the Login component of the affected software, specifically in the file "/Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=ta...

8.8CVSS7.2AI score0.0073EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/05/16 12:00 a.m.11 views

IDURAR ERP/CRM SQL注入漏洞

IDURAR ERP/CRM is an open source content management system by Salah Eddine Lalami Individual Developer. A security vulnerability exists in IDURAR ERP/CRM v1, which was discovered to contain an SQL injection vulnerability via components/api/login...

9.8CVSS8.6AI score0.00934EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/01/28 12:00 a.m.12 views

PT-2023-16366 · Unknown · Phpgurukul Bank Locker Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1.0 Description: A critical issue affects the Login component of the PHPGurukul Bank Locker Management System, specifically the file index.php. The manipulation of the username argument leads t...

9.8CVSS8AI score0.44268EPSS
SaveExploits1References9
OSV
OSV
added 2023/01/07 8:15 p.m.19 views

CVE-2017-20164

A vulnerability was found in Symbiote Seed up to 6.0.2. It has been classified as critical. Affected is the function onBeforeSecurityLogin of the file code/extensions/SecurityLoginExtension.php of the component Login. The manipulation of the argument URL leads to open redirect. It is possible to...

6.1CVSS6.4AI score
SaveExploits0References4
Prion
Prion
added 2022/12/27 11:15 p.m.20 views

Sql injection

A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file app/config/passport.js of the component Login. The manipulation of the argument id/email leads to sql injection. The name of the patch is...

7.5CVSS9.8AI score0.00605EPSS
SaveExploits0References3
CVE
CVE
added 2022/12/27 10:37 p.m.82 views

CVE-2021-4290

CVE-2021-4290 affects the DHBW Fallstudie login flow, specifically an unknown functionality in the file app/config/passport.js. The vulnerability arises from manipulation of the id/email parameter, leading to SQL injection. A patch named 5c13c6a972ef4c07c5f35b417916e0598af9e123 is recommended to ...

9.8CVSS8AI score0.00605EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder