53 matches found
CVE-2025-3307: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has...
CVE-2024-11241
A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2024-11241
A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2024-11241 code-projects Job Recruitment reset.php sql injection
A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been...
PT-2024-16851
Name of the Vulnerable Software and Affected Versions code-projects Job Recruitment version 1.0 Description A critical issue has been found in the software. The problem is related to an unknown functionality of the file reset.php, where the manipulation of the e argument leads to SQL injection...
CVE-2024-11241: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2024-9894 code-projects Blood Bank System reset.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2024-9894 code-projects Blood Bank System reset.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2024-9894: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
Privilege Escalation
idno/known is vulnerable to Privilege Escalation. The vulnerability exists due to the lack of validation in the password reset token in the getContent function of Reset.php, allowing an attacker to account takeover through the password reset poisoning by providing a malicious HTTP header...
PT-2021-10888
Name of the Vulnerable Software and Affected Versions oscommerce version 2.3.4.1 Description The issue concerns a functional problem in user registration and password rechecking. Specifically, a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/passwor...
CVE-2020-12735
reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...
Design/Logic Flaw
reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...
CVE-2020-12735
reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...
CVE-2020-12735: Insufficient Entropy
reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...
PT-2019-16000
Name of the Vulnerable Software and Affected Versions phpMyChat-Plus version 1.98 Description The issue concerns a reflected XSS vulnerability that can be exploited through JavaScript injection into the password reset URL. Specifically, the pmc username parameter in the pass reset.php URL is...
ServerZilla 1.0 - email SQL Injection
ServerZilla 1.0 - email SQL Injection Exploit Title: ServerZilla 1.0 - 'email' SQL Injection Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: https://serverzilla.sourceforge.io/ Software Link: https://ayera.dl.sourceforge.net/project/serverzilla/ServerZillasrc.zip Version:...
ServerZilla 1.0 SQL Injection
Exploit Title: ServerZilla 1.0 - 'email' SQL Injection Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: https://serverzilla.sourceforge.io/ Software Link: https://ayera.dl.sourceforge.net/project/serverzilla/ServerZillasrc.zip Version: 1.0 Category: Webapps Tested on:...
ServerZilla 1.0 - 'email' SQL Injection
Exploit Title: ServerZilla 1.0 - 'email' SQL Injection Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: https://serverzilla.sourceforge.io/ Software Link: https://ayera.dl.sourceforge.net/project/serverzilla/ServerZillasrc.zip Version: 1.0 Category: Webapps Tested on:...