1196 matches found
CVE-2023-29622: Improper Neutralization of Special Elements used in an SQL Command
Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchaseorder/admin/login.php...
CVE-2023-29623: Improper Neutralization of Input During Web Page Generation
Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...
PT-2023-22335
Name of the Vulnerable Software and Affected Versions Purchase Order Management version 1.0 Description The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability occurs via the password parameter at the "/purchase order/classes/login.php" API endpoint...
Purchase Order Management 跨站脚本漏洞
Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. A security vulnerability exists in Purchase Order Management v1.0, which was discovered to contain a Reflected Cross Site Scripting XSS...
BP Monitoring Management System SQL注入漏洞
BP Monitoring Management System is a web-based application by the individual developer of phpgurukul. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul BP Monitoring Management System, which stems from a problem with the file change-password.php, where manipulation of the...
Simple and Beautiful Shopping Cart System SQL注入漏洞
Simple and Beautiful Shopping Cart System is an e-commerce platform. A SQL injection vulnerability exists in SourceCodester Simple and Beautiful Shopping Cart System version 1.0, which stems from a problem in the file login.php, where manipulation of the parameters username/password can lead to s...
PT-2023-17357 · Sourcecodester · Sourcecodester Simple/Beautiful Shopping Cart System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple and Beautiful Shopping Cart System version 1.0 Description: A critical issue has been found in the processing of the file login.php, where the manipulation of the username and password arguments leads to SQL injection. T...
Alphaware Simple E-Commerce System SQL注入漏洞
Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. A SQL injection vulnerability exists in Alphaware Simple E-Commerce System version 1.0, which is caused by incorrect manipulation of the email/password parameter...
PT-2023-17039 · Unknown · Sourcecodester Alphaware Simple E-Commerce System
Name of the Vulnerable Software and Affected Versions: SourceCodester Alphaware Simple E-Commerce System version 1.0 Description: A critical issue has been found in the SourceCodester Alphaware Simple E-Commerce System, affecting an unknown part of the file admin/admin index.php. The manipulation...
Purchase Order Management 1.0 Cross Site Scripting Vulnerability
Purchase Order Management version 1.0 appears to suffer from a cross site scripting vulnerability due to printing errors with a malicious password payload. Title: Purchase Order Management-1.0 - XSS-Reflected - Information-gathering Author: nu11secur1ty Vendor:...
The vulnerability of the index3.php script in the Class and Exam Timetabling System allows a perpetrator to execute arbitrary SQL code.
The vulnerability of the index3.php script of the Class and Exam Timetabling System is related to the failure to protect the SQL query structure when processing the password parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
CVE-2023-1039
A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...
SourceCodester Class and Exam Timetabling System SQL注入漏洞
Class and Exam Timetabling System is a class and exam timetabling system by the individual developer Cherylda Jardeliza Ohiman. SourceCodester Class and Exam Timetabling System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter password...
PT-2023-1564 · Unknown · Class/Exam Timetabling System
Name of the Vulnerable Software and Affected Versions: Class and Exam Timetabling System version 1.0 Description: The issue is related to the lack of protection against SQL query structure manipulation when handling the password parameter in the index3.php script of the Class and Exam Timetabling...
Simple Customer Relationship Management SQL注入漏洞
Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Simple Customer Relationship Management version 1.0, which stems from a problem in the unknown section of the...
Exploit for SQL Injection in Simple_Task_Managing_System_Project Simple_Task_Managing_System
CVE-2022-40032: Simple Task Managing System - 'login' and 'pas...
SUSE CVE-2014-2061
The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value...
Event Management System SQL注入漏洞
Calendar Event Management System is an event management system. SQL injection vulnerability exists in Calendar Event Management System version 2.3.0, which stems from the presence of certain unknown processing in the component Login Page, with the parameter name/pwd leading to SQL injection. No...
