PT-2022-27910 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the login name parameter in the do graph auth sub 4061E0 function. Recommendations: For TRENDnet TEW755AP version 1.13B01, consider restricting...

Lead management system SQL注入漏洞

Lead management system is a lead management system developed by Mayuri K. The Lead Management System version 1.0 is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the login.php parameter username, and can be exploited by attackers to The...

CVE-2022-45280

A cross-site scripting XSS vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

EyouCms 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A security vulnerability exists in EyouCms v1.6.0, which originates from a cross-site scripting XSS vulnerability in the Url parameter of...

Huaxia ERP 安全漏洞

Huaxia ERP is an ERP software from Huaxia, China. A security vulnerability exists in Huaxia ERP that stems from an unknown method in the User Management component, where manipulation of the login parameter can result in an SQL injection...

CVE-2022-40305

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form...

CVE-2022-3013

A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated...

Simple Task Managing System SQL注入漏洞

Simple Task Managing System is a simple task management system for individual developers. Simple Task Managing System suffers from a SQL injection vulnerability that originates from an operation on the parameter login in an unknown section of its component /loginVaLidation.php, which can lead to ...

Simple and Nice Shopping Cart Script 跨站脚本漏洞

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A cross-site scripting vulnerability exists in Simple and Nice Shopping Cart Script, which stems from an unknown function in its /mkshope/login.php component that manipulates the parameter msg to cause cross-site...

SourceCodester Gym Management System SQL注入漏洞

SourceCodester Gym Management System is an American SourceCodester company's gym management system. The system is developed in C and sql server and features customer and vendor management, product management, sales management, gym membership management, fitness assessment, system logging, databas...

Simple Food Ordering System 跨站脚本漏洞

Simple Food Ordering System is a simple food ordering system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in version 1.0 of Simple Food Ordering System, which stems from an unknown part of the code of its login.php component, where entering a special stri...

CVE-2022-34949

Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at login.php...

CVE-2022-23168

The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--...

Virtua Cobranca SQL注入漏洞

Virtua Cobranca, a CRM software for call centers and collection and finance departments from Virtua Brazil, is vulnerable to SQL injection in versions prior to Virtua Cobranca 12R. The vulnerability stems from a missing data filter escape in the idusuario parameter in login.php. An attacker could...

CVE-2021-43506

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

CVE-2021-43650

WebRun 3.6.0.42 is vulnerable to SQL Injection via the P0 parameter used to set the username during the login process...

CVE-2021-43650

WebRun 3.6.0.42 is vulnerable to SQL Injection via the P0 parameter used to set the username during the login process...

Softwell Webrun SQL注入漏洞

Softwell Webrun is a virtual machine on which Softwell's Softwell Maker platform executes applications. It is responsible for providing the resources needed to correct software execution. An SQL injection vulnerability exists in Softwell Webrun version 3.6.0.42. An attacker can exploit this...

CVE-2021-43969

The login.jsp page of Quicklert for Digium 10.0.0 1043 is affected by both Blind SQL Injection with Out-of-Band Interaction DNS and Blind Time-Based SQL Injections. Exploitation can be used to disclose all data within the database up to and including the administrative accounts' login IDs and...

CVE-2021-44388

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. Login param is not object. An attacker can send an HTTP request to trigger this vulnerability...