CVE-2023-39777

A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter...

Exploit for Cross-site Scripting in Moosocial

mooSocial: XSS CVE-2023-43325 A reflected cross-site scripti...

CVE-2023-39777

A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter...

PT-2023-27103 · Vbulletin · Vbulletin

Name of the Vulnerable Software and Affected Versions: vBulletin versions 5.7.5 through 6.0.0 Description: A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin allows attackers to execute arbitrary web scripts or HTML via the "/login.php?do=login" url parameter...

vBulletin Cross-Site Scripting Vulnerability

vBulletin is an open source Web forum program based on PHP and MySQL from Internetbrands and vbulletinsolutions in the United States. A security vulnerability exists in vBulletin version 5.7.5, 6.0.0. An attacker can exploit this vulnerability to execute arbitrary Web script or HTML via the...

CVE-2020-19319

Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login...

D-LINK 619L 安全漏洞

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability, which originates from the curTime...

D-Link 619L 安全漏洞

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the FILECODE...

CVE-2023-28799

A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain...

PT-2023-23371 · Unknown · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the email parameter at the login core.php file. Recommendations: For Pharmacy Management System...

CVE-2023-27089

Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login parameter...

Cross site scripting

Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login parameter...

ehuacui-bbs 跨站脚本漏洞

ehuacui-bbs is ehuacui open source a bbs forum system. ehuacui-bbs has a security vulnerability that can be exploited by an attacker to cause a denial of service via a specially crafted payload in the login parameter...

PT-2023-20945 · Unknown · Ehuacui Bbs

Name of the Vulnerable Software and Affected Versions: Ehuacui BBS affected versions not specified Description: A Cross Site Scripting issue allows attackers to cause a denial of service via a crafted payload in the login parameter. Recommendations: At the moment, there is no information about a...

EyouCMS 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A security vulnerability exists in EyouCMS versions prior to 1.5.4. The vulnerability stems from an unknown function in the file login.php, whic...

Monitoring of Students Cyber Accounts System SQL注入漏洞

Monitoring of Students Cyber Accounts System is a Monitoring of Students Cyber Accounts System by Chris Jim Egot Individual Developer. A SQL injection vulnerability exists in SourceCodester Monitoring of Students Cyber Accounts System version 1.0, which stems from a problem with the file login.ph...

XHCMS SQL注入漏洞

XHCMS is a general-purpose CMS system developed by huzizhaz. A SQL injection vulnerability exists in XHCMS version 1.0, which originates from the presence of unknown code in the file login.php in the component POST Parameter Handler, which leads to sql injection via the parameter user...

PT-2023-16702 · Sourcecodester · Sourcecodester Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Boat Reservation System version 1.0 Description: A vulnerability has been found in the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross site scripting. The...

Exploit for SQL Injection in Simple_Task_Managing_System_Project Simple_Task_Managing_System

CVE-2022-40032: Simple Task Managing System - 'login' and 'pas...

SUSE CVE-2005-3893

Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System OTRS 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 user parameter in the Login action, and remote authenticated users via the...