ConnX ESP HR Management SQL Injection Vulnerability

ConnX ESP HR Management is a modular web-based HR management solution from ConnX Australia. A SQL injection vulnerability exists in ConnX ESP HR Management version 4.4.0. The vulnerability can be exploited by a remote attacker to execute arbitrary SQL commands by sending the...

SGIN.CN xiangyun Platform Cross-Site Scripting Vulnerability

SGIN.CN xiangyun platform is a set of micro-business distribution platform of China Sanjin SGIN network technology company. A cross-site scripting vulnerability exists in the login.php file in version 9.4.1 of the SGIN.CN xiangyun platform. A remote attacker can use the 'loginurl' parameter to...

CVE-2018-11553

SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...

Cross site scripting

Monstra CMS 3.0.4 has Reflected XSS during Login i.e., the login parameter to admin/index.php...

CVE-2017-14799

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page...

PHP Scripts Mall Select Your College Script SQL Injection Vulnerability

PHP Scripts Mall Select Your College Script is a PHP based categorized search script for higher education institutions by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Select Your College Script version 2.0.2. A remote attacker can exploit this vulnerability to...

CVE-2018-6859

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter...

CVE-2018-6859

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter...

Sql injection

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter...

CVE-2018-6863

SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter...

Sql injection

SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter...

CVE-2018-6863

SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter...

CVE-2018-6863

SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter...

Sql injection

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

UBUNTU-CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

CVE-2017-16896

CVE-2017-16896 affects Tiny Tiny RSS 17.4, specifically the forgotpass component’s login parameter. Multiple connected entries confirm a SQL injection in classes/handler/public.php, producing high/severe impact (NVD metrics: CVSSv2 7.5 MED/ HIGH; CVSSv3 9.8 CRITICAL) with network reach and no aut...

CVE-2017-14980

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login...

SOL.Connect ISET-mpp meter SQL Injection Vulnerability

The Popendorf Software Engineering SOL.Connect ISET-mpp meter is a photovoltaic plant data acquisition meter from Popendorf Software Engineering, Germany. A SQL injection vulnerability exists in the SOL.Connect ISET-mpp meter. This vulnerability can be exploited by remote attackers to execute...

FreeBSD telnetd(8) login(1) parameter injection vulnerability

telnetd is the FreeBSD server-side TELNET virtual terminal protocol. FreeBSD telnetd8 has an injection vulnerability in the implementation of the login1 parameter, which can result in a memory sequence allocation failure and invalid error detection, leading to the illegal construction and executi...

Login CAPTCHA Bypass Vulnerability in AVTECH Device Login Parameter

AVTECH, founded in 1996, is one of the world's leading CCTV manufacturers. The main products are surveillance equipment, network cameras, network video recorders and so on. There is a login authentication code bypass vulnerability in the login parameter of AVTECH devices. When the login request...