15671 matches found
Linux kernel Panel Ilitek Buffer Overflow DoS
The vulnerability of the ili9341dbiprobe function in the drivers/gpu/drm/panel/panel-ilitek-ili9341.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
PHPGurukul Small CRM 注入漏洞
Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements in the parameter oldpass in the file /admin/change-password.php. An attacker can exploit this vulnerabili...
CVE-2025-5128
A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injection. It is possible to launch the...
CVE-2025-5128
A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injection. It is possible to launch the...
CVE-2025-5128
A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injection. It is possible to launch the...
CVE-2025-5128
CVE-2025-5128 refers to ScriptAndTools Real-Estate-website-in-PHP v1.0. The issue is an SQL injection in the Admin Login Panel via the Password parameter in the /admin/ path, enabling remote exploitation. Public disclosure is noted, and vendor response is absent. Multiple connected sources corrob...
CVE-2025-5128 ScriptAndTools Real-Estate-website-in-PHP Admin Login Panel admin sql injection
A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injection. It is possible to launch the...
CVE-2025-5128 ScriptAndTools Real-Estate-website-in-PHP Admin Login Panel admin sql injection
A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injection. It is possible to launch the...
PT-2025-22843 · Unknown · Scriptandtools Real-Estate-Website-In-Php
Name of the Vulnerable Software and Affected Versions: ScriptAndTools Real-Estate-website-in-PHP version 1.0 Description: A critical vulnerability was found in the Admin Login Panel of the ScriptAndTools Real-Estate-website-in-PHP. The manipulation of the Password argument leads to SQL injection...
CVE-2025-5128: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injection. It is possible to launch the...
CVE-2025-41378
The SSID field is not parsed correctly and can be used to inject commands into the hostpad.conf file. This can be exploited by an attacker to extend his knowledge of the system and compromise other devices. The information is filtered by the logs function of the web panel...
CVE-2025-41379 Injection vulnerability in Iridium Certus 700
The Intellian C700 web panel allows you to add firewall rules. Each of these rules has an associated ID, but there is a problem when adding a new rule, the ID used to create the database entry may be different from the JSON ID. If the rule needs to be deleted later, the system will use the JSON I...
CVE-2025-41378 Injection vulnerability in Iridium Certus 700
The SSID field is not parsed correctly and can be used to inject commands into the hostpad.conf file. This can be exploited by an attacker to extend his knowledge of the system and compromise other devices. The information is filtered by the logs function of the web panel...
CVE-2025-41378
The CVE-2025-41378 entry maps to the Iridium Certus 700 (Intellian) vulnerability where the SSID field is not parsed correctly, enabling command injection into the hostpad.conf file. Consequence described across sources is attacker access to system details and potential compromise of additional d...
CVE-2024-27609
Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel...
CVE-2024-25224
A cross-site scripting XSS vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Size Number parameter under the Add Size function...
CVE-2024-25604
Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions does not properly check user permissions, which allows remote authenticated users with the VIEW user permission to edit...
CVE-2024-25169
An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...
CVE-2024-25226
A cross-site scripting XSS vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function...