PT-2022-11740 · Unknown · Dhbw Fallstudie

Name of the Vulnerable Software and Affected Versions: DHBW Fallstudie affected versions not specified Description: A critical issue was found in DHBW Fallstudie, affecting an unknown functionality of the file app/config/passport.js in the Login component. The manipulation of the id/email argumen...

CVE-2022-35843

CVE-2022-35843 affects FortiOS SSH login component (and FortiProxy SSH) across multiple versions, allowing remote, unauthenticated login via a crafted Access-Challenge response from RADIUS. Affected: FortiOS 6.0–7.2.0 and 6.2–6.4.9; FortiProxy 1.2.0–2.0.10 and 7.0.0–7.0.5. Root cause described as...

CVE-2022-35843

An authentication bypass by assumed-immutable data vulnerability CWE-302 in the FortiOS SSH login component 7.2.0, 7.0.0 through 7.0.7, 6.4.0 through 6.4.9, 6.2 all versions, 6.0 all versions and FortiProxy SSH login component 7.0.0 through 7.0.5, 2.0.0 through 2.0.10, 1.2.0 all versions may allo...

CVE-2022-3955 tholum crm42 Login class.user.php sql injection

A vulnerability was found in tholum crm42. It has been rated as critical. This issue affects some unknown processing of the file crm42\class\class.user.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit h...

crm42 SQL注入漏洞

crm42 is a user-friendly, cloud-based team management portal by Tim Holum Personal Developer. crm42 suffers from an SQL injection vulnerability that stems from some unknown handling of the crm42classclass.user.php file of the Login component, which can be exploited by an attacker to cause an SQL...

CVE-2022-3955

The CVE-2022-3955 entry concerns tholum crm42, specifically the Login component’s file crm42\class\class.user.php. The vulnerability arises from improper handling of the user_name argument, enabling SQL injection. It is described as exploitable remotely with a critical/high impact profile across ...

PT-2022-6101

Name of the Vulnerable Software and Affected Versions Control Web Panel versions prior to 0.9.8.1147 Description The issue is related to the login/index.php component in Control Web Panel, which allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login...

FortiTester 操作系统命令注入漏洞

FortiTester is a Fortinet professional-based network traffic testing tool from FortiTester, Inc. A security vulnerability exists in FortiTester versions 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, and 7.0.0 through 7.1.0, which stems from improper neutralization of a special element used in the SSH...

CVE-2022-3495

A vulnerability has been found in SourceCodester Simple Online Public Access Catalog 1.0 and classified as critical. This vulnerability affects unknown code of the file /opac/Actions.php?a=login of the component Admin Login. The manipulation of the argument username/password leads to sql injectio...

The vulnerability of the Login component in the file post_applogin.php is related to the ability to decode the session token of the Syncovery backup tool, which allows a hacker to increase their privileges.

The vulnerability of the Login component in the postapplogin.php file is related to the possibility of decoding the session token of the Syncovery backup tool. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Clinic’s Patient Management System SQL注入漏洞

Clinic's Patient Management System is a patient management system for Carlo Montero's clinics. A SQL injection vulnerability exists in Clinic's Patient Management System version 1.0 due to unknown functionality in the index.php file of the component Login, where manipulation of the parameter...

PT-2022-20607 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System affected versions not specified Description: A critical issue was found in the Login component of the system, specifically in the file index.php. The user name argument is vulnerable to sql...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associat...

PT-2022-18748 · Unknown · Sourcecodester Automated Beer Parlour Billing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automated Beer Parlour Billing System affected versions not specified Description: A critical issue was found in the Login component, where the manipulation of the username argument leads to SQL injection. This can be initiated...

IBM MQ Appliance Denial of Service Vulnerability (CNVD-2022-36974)

IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. A denial-of-service vulnerability exists in IBM MQ Appliance, which can be exploited by attackers to conduct denial-of-service attacks via the application login component...

Denial Of Service (DoS)

IBM MQ is vulnerable to denial of serviceDOS attacks. The vulnerability exists due to a lack of validation in login component, which allows an attacker to crash the system by dropping the performance...

CVE-2022-22355

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

CVE-2022-22355

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

Design/Logic Flaw

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

IBM MQ Appliance 安全漏洞

IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. A denial-of-service vulnerability exists in IBM MQ Appliance, which can be exploited by attackers to conduct denial-of-service attacks via the application login component...