1162 matches found
CVE-2023-48720
Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...
PT-2023-30924 · Unknown · Student Result Management System
Name of the Vulnerable Software and Affected Versions: Student Result Management System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The password parameter of the "login.php" resource does not validate the characters received, and they are se...
Projectworlds Student Result Management System SQL Injection Vulnerability
Projectworlds Student Result Management System is a student result management system from Projectworlds India. Projectworlds Student Result Management System v1.0 suffers from a SQL injection vulnerability, which arises when the "password" parameter of login.php does not validate the received...
CVE-2023-48720: Improper Neutralization of Special Elements used in an SQL Command
Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...
Tenda AX1803 Security Vulnerability
Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A security vulnerability exists in the Tenda AX1803 v.1.0.0.1, which originates from an arbitrary code execution vulnerability in the adslPwd parameter of the formfastsettinginternetset function...
CVE-2023-46963
An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...
CVE-2023-46963
An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...
Yunfan Learning Examination System Security Vulnerability
Yunfan Learning Examination System is an examination application from the Chinese company Yunfan. A security vulnerability exists in Yunfan Learning Examination System version v.6.5, which originated from a vulnerability that allows remote attackers to obtain sensitive information via the passwor...
CVE-2023-46963: Improper Authentication
An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...
CVE-2023-46963
An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...
CVE-2023-45336
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database...
PT-2023-29503 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the password parameter of the "routers/add-users.php" resource does not validate the characters...
CVE-2023-45336: Improper Neutralization of Special Elements used in an SQL Command
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database...
Online Food Ordering System SQL Injection Vulnerability
Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which stems from an insufficiently filtered password parameter on the routers/router.php page, resulting in an SQL...
CVE-2023-46977
TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...
CVE-2023-46977
TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...
CVE-2023-46977
TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...
CVE-2023-46977
TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...
CVE-2023-46977: Out-of-bounds Write
TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...
PT-2023-30278 · Totolink · Totolink Lr1200Gb
Name of the Vulnerable Software and Affected Versions: TOTOLINK LR1200GB version 9.1.0u.6619 B20230130 Description: A stack overflow issue was discovered via the password parameter in the loginAuth function. This issue can be exploited, potentially allowing unauthorized access. Recommendations: F...