1451 matches found
Sql injection
A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...
CVE-2022-1839 Home Clean Services Management System login.php sql injection
A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...
CVE-2022-1839
CVE-2022-1839 covers a SQL injection in Home Clean Services Management System 1.0, specifically in the login.php file. The vulnerability arises from manipulating the email parameter (example payload: admin%'//AND/ /(SELECT//5383/ /FROM//(SELECT(SLEEP(2)))JPeh)/ /AND/**/'frfq%'='frfq) which leads ...
CVE-2022-28531
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...
bbPress Cross-site Scripting (XSS) vulnerability
bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter...
Client management SQL injection vulnerability
Simple Client Management System is a simple web-based application that provides an online platform to manage company customer invoices.Simple Client Management System 1.0 is vulnerable to a SQL injection vulnerability that could be caused by a password parameter in Login.php. No detailed...
CVE-2021-43506
An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...
Sql injection
An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...
CVE-2021-43506
The vulnerability CVE-2021-43506 affects Sourcecodester Simple Client Management System 1.0, where an SQL Injection can be triggered via the password parameter in Login.php. The root cause is improper input handling leading to unauthorized access or data exposure. Multiple sources (NVD and Red Ha...
Patient Appointment Scheduler System SQL Injection Vulnerability
Patient Appointment Scheduler System is a patient appointment scheduling system project. It provides an online platform for clinic patients or potential patients to schedule appointments with physicians. patient Appointment Scheduler System version 1.0 contains a SQL injection vulnerability that...
CVE-2022-25013
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
Cross site scripting
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-25013
Ice Hrm 30.0.0.OS is vulnerable to multiple reflected XSS in login.php via the key and fm parameters. The CNVD entry cites lack of checksum filtering of user-supplied data and output data in these parameters as the root cause; other sources describe the issue as reflected XSS without detailing a ...
CVE-2022-25013
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-25013
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-24223
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
Sql injection
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
CVE-2022-24223
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...