246 matches found
Codezips E-Commerce Site 注入漏洞
Codezips E-Commerce Site is an open source e-commerce site by Codezips. An injection vulnerability exists in Codezips E-Commerce Site version 1.0, which stems from an SQL injection vulnerability contained in the email parameter of the signin.php file...
WordPress Sign In With Google plugin <= 1.8.0 - Authentication Bypass in authenticate_user vulnerability
Authentication Bypass in authenticateuser vulnerability discovered by shaman0x01 in WordPress Plugin Sign In With Google versions = 1.8.0...
Untrusted Query Object Evaluation in RPC API
During the sign in and sign up operations through the SurrealDB RPC API, an arbitrary object would be accepted in order to support a wide array of types and structures that could contain user credentials. This arbitrary object could potentially contain any SurrealDB value, including an object...
GHSA-64F8-PJGR-9WMR Untrusted Query Object Evaluation in RPC API
During the sign in and sign up operations through the SurrealDB RPC API, an arbitrary object would be accepted in order to support a wide array of types and structures that could contain user credentials. This arbitrary object could potentially contain any SurrealDB value, including an object...
PT-2026-60942
Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 1.5.5 SurrealDB versions 2.0.0-beta through 2.0.0-beta.2 Description The RPC API accepts arbitrary objects in the signin and signup operations without recursively validating them for non-computed values. When a reco...
PT-2026-54303
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A use after free issue exists in the SignIn function. A remote attacker could potentially exploit heap corruption—a condition where the heap memory is corrupted, leading to unpredictabl...
GO-2024-2848 Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana
Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
CVE-2024-0545
A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. This vulnerability affects unknown code of the file /index.php/signin. The manipulation of the argument redirect with the input http://evil.com leads to open redirect. The attack can be initiate...
CVE-2024-0545 CodeCanyon RISE Rise Ultimate Project Manager signin redirect
A vulnerability classified as problematic was found in CodeCanyon RISE Rise Ultimate Project Manager 3.5.3. This vulnerability affects unknown code of the file /index.php/signin. The manipulation of the argument redirect with the input http://evil.com leads to open redirect. The attack can be...
CVE-2024-0545 CodeCanyon RISE Ultimate Project Manager signin redirect
A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. This vulnerability affects unknown code of the file /index.php/signin. The manipulation of the argument redirect with the input http://evil.com leads to open redirect. The attack can be initiate...
CodeCanyon RISE Ultimate Project Manager Input Validation Error Vulnerability
CodeCanyon RISE Ultimate Project Manager is a project management and CRM software from CodeCanyon, Inc. An input validation error vulnerability exists in CodeCanyon RISE Ultimate Project Manager version 3.5.3, which stems from an open redirection vulnerability in file /index.php/signin...
CVE-2024-0545: URL Redirection to Untrusted Site
A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. This vulnerability affects unknown code of the file /index.php/signin. The manipulation of the argument redirect with the input http://evil.com leads to open redirect. The attack can be initiate...
PT-2024-15645 · Unknown · Codecanyon Rise Ultimate Project Manager
Name of the Vulnerable Software and Affected Versions: CodeCanyon RISE Rise Ultimate Project Manager version 3.5.3 Description: A problematic vulnerability was found in the CodeCanyon RISE Rise Ultimate Project Manager, affecting the file /index.php/signin. The manipulation of the redirect argume...
CVE-2023-6415
A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via signin.php in the user parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all...
FUXA SQL Injection vulnerability
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
CVE-2023-31719
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
CVE-2023-31719
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
CVE-2023-31719
CVE-2023-31719 affects FUXA versions ≤ 1.1.12, with a SQL Injection vulnerability exploitable via the /api/signin endpoint. The Red Hat, GHSA, and OSV listings corroborate the same flaw and its association to FUXA’s signin API. The core impact is high (CVE metrics show P t high across confidentia...
FUXA SQL Injection Vulnerability
FUXA is an open source web-based process visualization SCADA/HMI/Dashboard software. A security vulnerability exists in FUXA version 1.1.12 and earlier, which stems from vulnerability to SQL injection attacks via /api/signin...