Cross site scripting

A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of the argument tagtag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-1799 EyouCMS login.php cross site scripting

A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of the argument tagtag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-1799 EyouCMS login.php cross site scripting

A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of the argument tagtag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-1799 EyouCMS login.php cross site scripting

A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of the argument tagtag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-1799

CVE-2023-1799 affects EyouCMS up to version 1.5.4, with a cross-site scripting vulnerability in the login.php component triggered by manipulating the tag_tag argument. The issue is exploitable remotely and is linked to an unknown function in login.php; multiple sources corroborate an XSS conditio...

CVE-2023-1798 EyouCMS login.php cross site scripting

A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument typename leads to cross site scripting. The attack may be launched remotely. The exploit has be...

CVE-2023-1798

CVE-2023-1798 affects EyouCMS versions up to 1.5.4. The vulnerability resides in login.php where manipulating the typename argument enables cross-site scripting. It can be triggered remotely and an exploit has been publicly disclosed. Affected product: EyouCMS; vulnerable function/file: login.php...

CVE-2023-1798 EyouCMS login.php cross site scripting

A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument typename leads to cross site scripting. The attack may be launched remotely. The exploit has be...

PT-2023-17255 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS versions up to 1.5.4 Description: A problematic issue has been found in the file login.php, where the manipulation of the typename argument leads to cross site scripting. The attack can be launched remotely. Recommendations: For...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2023-1737 SourceCodester Young Entrepreneur E-Negosyo System login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2023-1737 SourceCodester Young Entrepreneur E-Negosyo System login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2016-15030

A vulnerability classified as problematic has been found in Arno0x TwoFactorAuth. This affects an unknown part of the file login/login.php. The manipulation of the argument from leads to open redirect. It is possible to initiate the attack remotely. This product does not use versioning. This is w...

Open redirect

A vulnerability classified as problematic has been found in Arno0x TwoFactorAuth. This affects an unknown part of the file login/login.php. The manipulation of the argument from leads to open redirect. It is possible to initiate the attack remotely. This product does not use versioning. This is w...

CVE-2016-15030 Arno0x TwoFactorAuth login.php redirect

A vulnerability classified as problematic has been found in Arno0x TwoFactorAuth. This affects an unknown part of the file login/login.php. The manipulation of the argument from leads to open redirect. It is possible to initiate the attack remotely. This product does not use versioning. This is w...

CVE-2023-1506

A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack...

CVE-2023-1506 SourceCodester E-Commerce System login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack...

CVE-2023-1480

A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument un leads to sql injection...

Sql injection

A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument un leads to sql injection...