328 matches found
CVE-2021-42670
CVE-2021-42670 CVE-2021-42670 - 工程师在线门户系统中的SQL注入漏洞。 技术描述： 工程师在线门户（Engineers Online Portal）存在SQL注入漏洞。攻击者可以通过利用"announcementsstudent.php"网页中的脆弱参数"id"来操纵执行的SQL查询。 因此，攻击者可以从web服务器中提取敏感数据。 受影响组件 - 脆弱页面 - announcementsstudent.php 脆弱参数 - "id" 利用步骤： 1. 导航到...
CVE-2021-42671
CVE-2021-42671 CVE-2021-42671 - Vulnerabilidad de control de acceso roto en el sistema de portal en línea de ingenieros. Descripción técnica: Existe una vulnerabilidad de control de acceso roto en el Portal en línea de ingenieros. Un atacante puede aprovechar esta vulnerabilidad para eludir los...
CVE-2021-42669
CVE-2021-42669 CVE-2021-42669 - 远程代码执行漏洞，通过工程师在线门户系统中的无限制文件上传实现。 技术描述： 工程师在线门户系统中存在无限制文件上传漏洞。攻击者可利用此漏洞在受影响的Web服务器上获得远程代码执行。 一旦上传头像，该头像将被上传到 /admin/uploads/ 目录，并且所有用户均可访问。 通过上传一个简单的PHP webshell，攻击者可以在Web服务器上获得远程代码执行。 受影响组件 - 漏洞页面 - teacheravatar.php CVE-2021-42669.py 用法 - root@kitploit: Upload a...
CVE-2021-42668
cve-2021-42668 CVE-2021-42668 - Vulnerabilidad de inyección SQL en el sistema de portal en línea de Engineers. Descripción técnica: Existe una vulnerabilidad de inyección SQL en Engineers Online Portal. Un atacante puede aprovechar el parámetro vulnerable "id" en la página web "myclassmates.php"...
CVE-2021-42664
CVE-2021-42664 CVE-2021-42664 - Vulnerabilidad de Cross-Site Scripting almacenado en el sistema Engineers online portal system. Descripción técnica: Existe una vulnerabilidad XSS almacenado en el sistema Engineers online portal system. Un atacante puede aprovechar esta vulnerabilidad para ejecuta...
CVE-2021-42665
CVE-2021-42665 CVE-2021-42665 - 工程师在线门户系统中的SQL注入认证绕过漏洞。 技术描述： 在工程师在线门户系统的登录表单中存在一个SQL注入漏洞，攻击者可利用该漏洞绕过认证。 受影响组件 - 受影响页面 - login.php 受影响参数 - "username", "password" 利用步骤： 1. 导航至 http://localhost/niamunozmonitoringsystem/login.php 2. 在用户名或密码字段中插入有效载荷 3. 点击登录 概念验证（PoC） - 以下有效载荷将允许绕过工程师在线门户系统登录表单的认证机制 ...
CVE-2021-42666
CVE-2021-42666 CVE-2021-42666 - 工程师在线门户系统中的SQL注入漏洞。 技术描述： 工程师在线门户系统中存在一个SQL注入漏洞。攻击者可以利用"quizquestion.php"网页中易受攻击的"id"参数来操纵所执行的SQL查询。从而他可以从web服务器中提取敏感数据。 受影响组件 - 易受攻击的页面 - quizquestion.php 易受攻击的参数 - "id" 利用步骤： 1. 导航至 http://localhost/niamunozmonitoringsystem/quizquestion.php 2. 在id参数中插入你的payload...
CVE-2026-6217
Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...
EUVD-2026-70952
Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...
CVE-2026-6217
Pik Online Portal (by Pik Online Software Solutions Inc.) is vulnerable to information disclosure via use of a one-way hash without a salt , allowing cryptanalysis of hashed data. The issue affects versions through 3.5.1 . The CVSS 3.1 score is 6.3 (MEDIUM) , with a network attack vector, low com...
CVE-2026-6217 Information Disclosure in Pik Online Software's Portal
Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...
CVE-2026-6217 Information Disclosure in Pik Online Software's Portal
Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...
PT-2026-85432
Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...
CVE-2026-6217: Use of a One-Way Hash without a Salt
Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...
CVE-2026-36236
SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...
EUVD-2026-21392
SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...
SourceCodester Engineers Online Portal 安全漏洞
SourceCodester Engineers Online Portal is an online portal for engineers, developed by SourceCodester as open source. Version 1.0 of the SourceCodester Engineers Online Portal contains a security vulnerability. This vulnerability stems from the newpassword parameter in the updatepassword.php file...
CVE-2026-36236
SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...
CVE-2026-36236: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...