Online Notice Board System SQL Injection Vulnerability

Online Notice Board System is an online bulletin board system. A SQL injection vulnerability exists in Online Notice Board System v1.0, which occurs when the e parameter of the login.php page is processed without filtering and the data is sent to the database for processing...

PT-2024-13965 · Unknown · Online Notice Board System

Name of the Vulnerable Software and Affected Versions: Online Notice Board System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the e parameter of the "login.php" resource does not validate the characters received, and they are...

Grupo Embras GEOSIAP ERP SQL Injection Vulnerability

Grupo Embras GEOSIAP ERP is an enterprise resource planning system from the Grupo Embras team. A SQL injection vulnerability exists in Grupo Embras GEOSIAP ERP version v2.2.167.02, which originates from a codLogin parameter in the login page that contains SQL injection...

TOTOLINK A7100RU 安全漏洞

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A7100RU version V7.4cu.2313B20191024, which originates from the parameter flag in file /cgi-bin/cstecgi.cgi?action=login that fails to correctly validate the length...

CVE-2023-49688

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtUser' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48720

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48685

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'psd' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

Sql injection

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

Kashipara Job Portal SQL Injection Vulnerability

Kashipara Job Portal is an online job portal system from Kashipara. A SQL injection vulnerability exists in Kashipara Job Portal v1.0, which stems from the "txtUser" parameter of login.php that does not validate received characters and sends them to the database unfiltered...

PT-2023-30895 · Unknown · Railway Reservation System

Name of the Vulnerable Software and Affected Versions: Railway Reservation System version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the user parameter of the "login.php" resource does not validate the characters received and they are sent...

Netcon NS-ASG SQL Injection Vulnerability

Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A SQL injection vulnerability exists in Netcon NS-ASG Application Security Gateway version 6.3.1, which originates from the parameter loginId in the file /admin/singlelogin.php?submit=1 that can lead to SQL...

Web-Based Student Clearance System SQL注入漏洞

Web-Based Student Clearance System is a web-based student clearance system. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which originates from the lack of validation of externally entered SQL statements in the parameter Student in /libsystem/login.php. A...

PT-2023-32618 · Tyler Technologies · Tyler Technologies Court Case Management Plus

Name of the Vulnerable Software and Affected Versions: Tyler Technologies Court Case Management Plus affected versions not specified Description: The issue allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint...

PT-2023-7516 · Unknown · Gaatitrack Courier Management System

Name of the Vulnerable Software and Affected Versions: GaatiTrack Courier Management System version 1.0 Description: The issue is related to a Blind SQL injection in the ajax.php file of the GaatiTrack Courier Management System. This occurs due to inadequate protection of the SQL query structure...

CVE-2023-45203

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

PT-2023-29456 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue concerns multiple Open Redirect vulnerabilities. Specifically, the q parameter of the "login.php" resource is vulnerable, allowing an attacker to redirect a victim user to an...

mooSocial Cross-Site Scripting Vulnerability

mooSocial is a multi-platform, mobile-ready, user-friendly script from mooSocial, Inc. for building community-driven content sharing and social networking sites. A security vulnerability exists in mooSocial version v.3.1.8. An attacker can exploit this vulnerability to execute arbitrary code via ...

CVE-2023-43381

SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php...

Tianchoy Blog SQL Injection Vulnerability

Tianchoy Blog is a blog site for Tianchoy's personal developers. A SQL injection vulnerability exists in Tianchoy Blog version v.1.8.8, which allows remote attackers to obtain sensitive information via the id parameter in login.php...

CVE-2023-39777

A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter...