PYSEC-2024-123

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other...

PT-2024-17577 · Pyload · Pyload

Name of the Vulnerable Software and Affected Versions: pyload/pyload version 0.5.0 Description: An open redirection vulnerability exists due to improper handling of the next parameter in the login functionality. This allows an attacker to redirect users to malicious sites, potentially leading to...

Job Recruitment 注入漏洞

Job Recruitment by code-projects is a job portal project developed using PHP, CSS, JavaScript, and MySQL technologies. An injection vulnerability exists in code-projects Job Recruitment version 1.0, which originates from an SQL injection vulnerability in the email parameter of the /login.php page...

Courier Management System /login.php File SQL Injection Vulnerability

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that originates from improper handling of the txtusername parameter in the /login.php file. An attacker could exploit this vulnerability to disclose sensitive information...

Codezips Free Exam Hall Seating Management System SQL注入漏洞

Codezips Free Exam Hall Seating Management System is a free exam hall seating management system from Codezips open source. A SQL injection vulnerability exists in Codezips Free Exam Hall Seating Management System version 1.0, which stems from a parameter email in the file /login.php that can lead...

CVE-2024-48579

SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary code via the username parameter of the login request...

VulnCheck KEV: CVE-2018-18775

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product...

CVE-2024-8473

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through useremail parameter in /jobportal/admin/login.php...

CVE-2024-8340

A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part of the file /Actions.php?a=login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

PT-2024-29314 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: A SQL injection vulnerability in the /smsa/admin login.php file allows an attacker to execute arbitrary SQL commands via the username parameter of the Admin Login Page...

PT-2024-28349

Name of the Vulnerable Software and Affected Versions Gnuboard versions 6.0.4 and below Description An Open Redirect issue exists in Gnuboard. The issue is due to a flaw in the url parameter within the login path. This allows an attacker to redirect users to a malicious website. The vulnerable...

Code-Projects Blood Bank System 跨站脚本漏洞

Code-Projects Blood Bank System is a Code-Projects open source blood bank management system. A cross-site scripting vulnerability exists in Code-Projects Blood Bank System version 1.0, which is caused by a cross-site scripting vulnerability in the user parameter of the /login.php page...

Thinkgem JeeSite 跨站脚本漏洞

Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform of China Joyuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components , workflo...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. Kashipara Music Management System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the email parameter of /music/ajax.php?action=login against external SQL input, which c...

School-Management-System 安全漏洞

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the password parameter of the login.php page...

PT-2024-19494 · Unknown · Instarispacs

Name of the Vulnerable Software and Affected Versions: InstaRISPACS affected versions not specified Description: The issue exists due to insufficient validation of user-supplied input for the loginTo parameter in the user login module of the web interface. A remote attacker could exploit this by...

CVE-2024-33971

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'username' in '/login.php' parameter...

CVE-2024-7449

A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

Placement Management System SQL注入漏洞

Placement Management System is an itsourcecode open source placement management system. A SQL injection vulnerability exists in Placement Management System version 1.0, which is caused by a SQL injection vulnerability in the email parameter of the login.php file...

SourceCodester Simple Realtime Quiz System SQL注入漏洞

SourceCodester Simple Realtime Quiz System is a real-time quiz system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Simple Realtime Quiz System version 1.0, which stems from an SQL injection vulnerability in the username parameter of the Login component in the...