CVE-2024-7164

A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...

ForIP Tecnologia Administração PABX SQL注入漏洞

ForIP Tecnologia Administração PABX is a phone system from ForIP Tecnologia. A SQL injection vulnerability exists in ForIP Tecnologia Administração PABX version 1.x. The vulnerability stems from the usuario parameter of the /login page containing a SQL injection vulnerability...

CVE-2024-40393

Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php...

CVE-2024-40393

CVE-2024-40393 affects Online Clinic Management System In PHP With Free Source code v1.0. The vulnerability is a SQL injection in the login.php endpoint via the user parameter, with a CVSS v3.1 base score of 9.8 (CRITICAL) and impact to confidentiality, integrity, and availability. Publicly avail...

CVE-2024-37679

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp parameter...

School-Management-System SQL Injection Vulnerability

School-Management-System is a school management system by the individual developer Lahiru Danushka. A SQL injection vulnerability exists in School-Management-System version 1.0.0 and 1.0.1, which stems from a parameter email in the file login.php that can lead to SQL injection...

Simple Inventory System SQL注入漏洞

Simple Inventory System is a simple inventory system by argie individual developer. SourceCodester Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from the parameter username in the file login.php...

CVE-2024-32337

A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ADMIN LOGIN URL parameter under the Security module...

PT-2024-24186 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Loan Management System version 1.0 Description: The issue concerns SQL Injection via the password parameter in the "login.php" file. This allows for potential unauthorized access to sensitive data. There is no information...

CVE-2024-2514

A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. T...

PT-2024-20838 · Abo.Cms · Abo.Cms

Name of the Vulnerable Software and Affected Versions: ABO.CMS version 5.8 Description: The issue allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via the tb login parameter in the admin login page...

Exploit for SQL Injection in Abocms Abo.Cms

ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227...

CVE-2024-25325

SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to the txtemail parameter in the login.php...

CVE-2024-1971

A vulnerability has been found in Surya2Developer Online Shopping System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument password with the input...

Simple School Managment System SQL注入漏洞

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statement , an attacker can exploit the...

GHSA-V435-PFJ6-68R3 Cross-site Scripting in JFinal

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

JFinal Cross-Site Scripting Vulnerability

JFinal is a Java language based WEB + ORM open source framework. A cross-site scripting vulnerability exists in JFinal version 5.0.0, which originates from allowing an attacker to run arbitrary code via the /admin/login password parameter...

CXBSoft Post-Office SQL Injection Vulnerability

CXBSoft Post-Office is a post office system from CXBSoft. A SQL injection vulnerability exists in CXBSoft Post-Office 1.0 and earlier versions, which originates from a SQL injection vulnerability in the parameter usernamelogin in the file /apps/loginauth.php...

Taokeyun SQL Injection Vulnerability

Taokeyun is a shopping mall system for individual jifeer developers. A SQL injection vulnerability exists in Taokeyun version 1.0.5 and earlier versions, which originates from a SQL injection vulnerability in the username parameter of the login function in the...

CVE-2024-0267

A vulnerability classified as critical was found in Kashipara Hospital Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Parameter Handler. The manipulation of the argument email/password leads to sql injection. The atta...