CVE-2023-1949

A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file change-password.php of the component Change Password Handler. The manipulation of the argument password leads to sql injection. It is possibl...

Sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file change-password.php of the component Change Password Handler. The manipulation of the argument password leads to sql injection. It is possibl...

CVE-2023-1949 PHPGurukul BP Monitoring Management System Change Password change-password.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file change-password.php of the component Change Password Handler. The manipulation of the argument password leads to sql injection. It is possibl...

PT-2023-17362 · Unknown · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue was found in the Change Password Handler component, specifically in the file change-password.php. The manipulation of the password argument leads to SQL...

GHSA-PV4M-H859-JWMQ Cross-Site Request Forgery in XXL Job

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

Cross-Site Request Forgery in XXL Job

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

CVE-2023-0674 XXL-JOB New Password updatePwd cross-site request forgery

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

CVE-2023-0674

CVE-2023-0674 affects XXL-JOB 2.3.1. The issue concerns the /user/updatePwd endpoint in the New Password Handler, where a cross-site request forgery (CSRF) can be triggered due to insufficient validation. The vulnerability can be exploited remotely and, per sources, the exploit has been disclosed...

XXL-JOB 跨站请求伪造漏洞

XXL-JOB is a distributed task scheduling platform based on java language from XU Xueli XXL-JOB community. A cross-site request forgery vulnerability exists in XXL-JOB version 2.3.1, which stems from some unknown functionality in the file /user/updatePwd of the component New Password Handler,...

CVE-2013-10004

A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect implementation of a hashing function leads to...

Design/Logic Flaw

A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect implementation of a hashing function leads to...

CVE-2013-10004

CVE-2013-10004 affects Telecommunication Software SAMwin Contact Center Suite 5.1. The issue is in the Password Handler component, specifically the function passwordScramble in SAMwinLIBVB.dll, where an incorrect hashing implementation enables predictable authentication. Upgrading to SAMwin Conta...