CVE-2018-6863

SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter...

Sql injection

SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter...

CVE-2018-6863

SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter...

Sql injection

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

UBUNTU-CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

CVE-2017-16896

CVE-2017-16896 affects Tiny Tiny RSS 17.4, specifically the forgotpass component’s login parameter. Multiple connected entries confirm a SQL injection in classes/handler/public.php, producing high/severe impact (NVD metrics: CVSSv2 7.5 MED/ HIGH; CVSSv3 9.8 CRITICAL) with network reach and no aut...

CVE-2017-14980

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login...

SOL.Connect ISET-mpp meter SQL Injection Vulnerability

The Popendorf Software Engineering SOL.Connect ISET-mpp meter is a photovoltaic plant data acquisition meter from Popendorf Software Engineering, Germany. A SQL injection vulnerability exists in the SOL.Connect ISET-mpp meter. This vulnerability can be exploited by remote attackers to execute...

FreeBSD telnetd(8) login(1) parameter injection vulnerability

telnetd is the FreeBSD server-side TELNET virtual terminal protocol. FreeBSD telnetd8 has an injection vulnerability in the implementation of the login1 parameter, which can result in a memory sequence allocation failure and invalid error detection, leading to the illegal construction and executi...

Login CAPTCHA Bypass Vulnerability in AVTECH Device Login Parameter

AVTECH, founded in 1996, is one of the world's leading CCTV manufacturers. The main products are surveillance equipment, network cameras, network video recorders and so on. There is a login authentication code bypass vulnerability in the login parameter of AVTECH devices. When the login request...

SQL Injection Vulnerability in Login.aspx Parameter of Information Management System of Beijing Aerospace Golden Shield Hotel

Beijing Aerospace Golden Shield Technology Hotel Information Management System is a set of hotel management software. There is a SQL injection vulnerability in Login.aspx, the vulnerability parameter is tbUser, attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2015-7706

Multiple cross-site scripting XSS vulnerabilities in Secure Data Space SDS-API before 3.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to api/v3/public/shares/downloads/, the 2 authType parameter to api/v3/auth/login, or the 3 login parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Secure Data Space SDS-API before 3.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to api/v3/public/shares/downloads/, the 2 authType parameter to api/v3/auth/login, or the 3 login parameter to...

CVE-2015-7706

Multiple cross-site scripting XSS vulnerabilities in Secure Data Space SDS-API before 3.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to api/v3/public/shares/downloads/, the 2 authType parameter to api/v3/auth/login, or the 3 login parameter to...

Kallithea CRLF Injection Vulnerability

Kallithea is is a free source code management system. The Kallitheaadmin/login URI fails to adequately filter the 'namefrom' parameter, allowing remote attackers to exploit this vulnerability to inject arbitrary HTTP headers and perform HTTP response splitting attacks...

SQL Injection Vulnerability in HODE-CMS Website Management Platform

Nanjing SidiMed Software Co., Ltd. is a joint-stock private enterprise mainly focusing on application software development, and is committed to the development and promotion of software application platform technology. SQL injection vulnerability exists in HODE-CMS website management platform. An...

CVE-2014-6619

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

PT-2014-6295 · Esri · Esri Arcgis For Server

Name of the Vulnerable Software and Affected Versions: ESRI ArcGIS for Server version 10.1.1 Description: The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, related to login. This can be exploited to trick users in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Andy's PHP Knowledgebase Aphpkb before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to saa.php, 2 username parameter to login.php, or 3 keywordlist parameter to keysearch.php...