PHP Login System 2.0.1 - Cross-Site Scripting

msaad1999's PHP-Login-System 2.0.1 contains a reflected cross-site scripting caused by unsanitized input in 'validator' parameter in /reset-password, letting remote attackers execute arbitrary JavaScript in a user's browser, exploit requires attacker to craft malicious URL id: CVE-2023-38875 info...

CVE-2026-29861

CVE-2026-29861 🛡️ Divulgazione CVE: CVE-2026-29861 — SQL Injection in PHP-MYSQL-User-Login-System Data di divulgazione: 10 aprile 2026 ID CVE: CVE-2026-29861 Gravità: CRITICA CVSS 9.8 🧩 Riepilogo Una vulnerabilità critica di SQL Injection esiste in PHP-MYSQL-User-Login-System v1.0, in particolare...

CVE-2024-24139

CVE-2024-24139: SQL-Injection im Anmeldesystem mit E-Mail-Verifizierung Nachweis des Konzepts PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24139.md Nachweis des Konzepts PoC : https://github.com/BurakSevben/CVE-2024-24139/blob/main/CVE-2024-24139.md...

CVE-2026-10208

A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function loginuser of the file login1.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...

CVE-2026-29861

PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...

PHP MySQL User Signup Login System 安全漏洞

PHP MySQL User Signup Login System is a MySQL registration and login system developed by Keerti Vishwkarma. Version 1.0 of the PHP MySQL User Signup Login System has a security vulnerability. This vulnerability stems from a flaw in the username parameter used in the login.php file, which may lead...

CVE-2025-14668

A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now publi...

EUVD-2020-22930

Malware in sbrugna...

EUVD-2020-21607

Malware in sbrugna...

EUVD-2007-5757

Malware in sbrugna...

EUVD-2024-51317

Malicious code in bioql PyPI...

EUVD-2024-17434

Malicious code in bioql PyPI...

EUVD-2025-15713

Malicious code in bioql PyPI...

EUVD-2025-6304

Malicious code in bioql PyPI...

EUVD-2024-27220

Malicious code in bioql PyPI...

EUVD-2024-27219

Malicious code in bioql PyPI...

EUVD-2023-42644

Malicious code in bioql PyPI...

EUVD-2024-17436

Malicious code in bioql PyPI...

EUVD-2023-42643

Malicious code in bioql PyPI...

CVE-2025-28016

A Reflected Cross-Site Scripting XSS vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters...