Lucene search
K

32 matches found

NVD
NVD
added 5 days ago8 views

CVE-2026-44367

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to inconsistent handling of username case sensitivity, leading to a targeted Denial of Service DoS and complete account...

2.7CVSS0.00039EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.2 views

WebDamn User Registration Login System SQL Injection Vulnerability

The WebDamn User Registration Login System is a user registration and login module developed by WebDamn Corporation. The WebDamn User Registration Login System has a SQL injection vulnerability, which stems from improper handling of email credentials. This vulnerability may lead to SQL injection...

8.8CVSS5.8AI score0.0046EPSS
Exploits0References4
NVD
NVD
added 2026/01/22 5:16 p.m.2 views

CVE-2025-69052

Missing Authorization vulnerability in FmeAddons Registration & Login with Mobile Phone Number for WooCommerce registration-login-with-mobile-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Registration & Login with Mobile Phone Number for...

9.8CVSS0.0008EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.6 views

CVE-2025-69052

CVE-2025-69052 is a missing-authorization vulnerability affecting the WordPress plugin Registration & Login with Mobile Phone Number for WooCommerce (versions up to and including 1.3.1). The issue arises from incorrectly configured access control security levels, enabling an unauthenticated actor...

9.8CVSS5.4AI score0.0008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.1 views

CVE-2025-69052 WordPress Registration & Login with Mobile Phone Number for WooCommerce plugin <= 1.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in FmeAddons Registration & Login with Mobile Phone Number for WooCommerce registration-login-with-mobile-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Registration & Login with Mobile Phone Number for...

9.8CVSS5.9AI score0.0008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/17 8:24 a.m.1 views

CVE-2025-10484 Registration & Login with Mobile Phone Number for WooCommerce <= 1.3.1 - Authentication Bypass

The Registration & Login with Mobile Phone Number for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.1. This is due to the plugin not properly verifying a users identity prior to authenticating them via the fmalwpsetsessionphpfun...

9.8CVSS5.5AI score0.0052EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 2:27 a.m.1 views

CVE-2023-27225

A cross-site scripting XSS vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the first and last name field...

5.4CVSS5.8AI score0.00401EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.2 views

PHPGurukul User Registration & Login and User Management System 注入漏洞

PHPGurukul User Registration & Login and User Management System is a user registration & login and user management system from PHPGurukul. An injection vulnerability exists in PHPGurukul User Registration & Login and User Management System version 3.3, which originates from an SQL injection due t...

9.8CVSS7.8AI score0.00204EPSS
Exploits1References5
OSV
OSV
added 2025/03/13 4:15 p.m.1 views

CVE-2025-28015

A HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary HTML code via the fname, lname, and contact parameters...

5.3CVSS6.1AI score
Exploits0References1
CVE
CVE
added 2024/11/26 11:31 p.m.44 views

CVE-2024-11818

CVE-2024-11818 affects PHPGurukul User Registration & Login and User Management System 1.0. The vulnerability is in /signup.php where manipulating the email parameter causes SQL injection. It is exploitable remotely and has been disclosed publicly. Connected sources also note a recommended tempor...

9.8CVSS7.5AI score0.00097EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/11/26 11:0 p.m.15 views

CVE-2024-11817 PHPGurukul User Registration & Login and User Management System index.php sql injection

A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be...

7.5CVSS0.00106EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/11/26 11:0 p.m.13 views

CVE-2024-11817 PHPGurukul User Registration & Login and User Management System index.php sql injection

A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be...

7.5CVSS7.7AI score0.00106EPSS
Exploits1References5
CVE
CVE
added 2024/11/26 11:0 p.m.48 views

CVE-2024-11817

The CVE-2024-11817 entry concerns PHPGurukul User Registration & Login and User Management System v1.0. It specifies a vulnerability in the /admin/index.php file where manipulation of the username parameter enables SQL injection. The attack can be launched remotely and the exploit has been disclo...

9.8CVSS7.4AI score0.00106EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/11/14 12:0 a.m.11 views

CVE-2024-48284

A Reflected Cross-Site Scripting XSS vulnerability was found in the /search-result.php page of the PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary scripts via the searchkey parameter in a POST HTTP request...

0.00172EPSS
Exploits1References1
CVE
CVE
added 2024/10/15 12:0 a.m.53 views

CVE-2024-48279

PHPGurukul User Registration & Login and User Management System 3.2 has a HTML Injection vulnerability in /search-result.php. The searchkey parameter (POST) allows remote attackers to inject/execute arbitrary HTML. Root cause is not detailed beyond this; CVSS v3.1 vector indicates high impact wit...

7.6CVSS8.1AI score0.0094EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2024/08/13 12:0 a.m.3 views

SAP Commerce 信息泄露漏洞

SAP Commerce is a set of cloud-based e-commerce platforms from Germany's SAP. It supports sales management, marketing management, order management, and operations management. An information disclosure vulnerability exists in SAP Commerce that stems from the ability to recognize valid accounts...

5.3CVSS6.1AI score0.00406EPSS
Exploits0References4
OSV
OSV
added 2024/04/10 7:15 p.m.1 views

DEBIAN-CVE-2021-47198

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free in lpfcunregrpi routine An error is detected with the following report when unloading the driver: "KASAN: use-after-free in lpfcunregrpi+0x1b1b" The NLPREGLOGINSEND nlpflag is set in...

7.8CVSS5.8AI score0.00018EPSS
Exploits0References1
NVD
NVD
added 2024/03/14 2:15 p.m.9 views

CVE-2024-28323

The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection...

6.5CVSS7.4AI score0.00146EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/03/14 12:0 a.m.12 views

CVE-2024-28323

The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection...

7.9AI score0.00146EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/02/28 12:0 a.m.1 views

User Registration & Login and User Management System Security Vulnerabilities

User Registration & Login and User Management System is a user management system with administration panel. A security vulnerability exists in PHPGurukul User Registration & Login and User Management System version 1.0, which allows an attacker to run arbitrary code through the search bar...

6.1CVSS7.3AI score0.04952EPSS
Exploits1References2
Rows per page
Query Builder