Lucene search
K

1035 matches found

CNNVD
CNNVD
added 2024/02/21 12:0 a.m.4 views

PHP MySQL User Signup Login System Access Control Error Vulnerability

The PHP MySQL User Signup Login System is a login and registration form that uses HTML, PHP and MySQL. An access control error vulnerability exists in PHP MySQL User Signup Login System version 1.0, which originates from an access control error vulnerability in the file /edit.php...

9.8CVSS6.8AI score0.00808EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/02/21 12:0 a.m.4 views

PT-2024-18233 · Unknown · Keerti1924 Php-Mysql-User-Login-System

Name of the Vulnerable Software and Affected Versions: keerti1924 PHP-MYSQL-User-Login-System version 1.0 Description: A problematic vulnerability was found in the keerti1924 PHP-MYSQL-User-Login-System. The issue affects an unknown function of the file /signup.php. By manipulating the username...

5.4CVSS6.4AI score0.00584EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2024/02/15 4:17 a.m.2 views

SUSE CVE-2023-6152

A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verifyemailenabled" will only validate email only on sign up...

5.4CVSS9.5AI score0.01385EPSS
Exploits1References12
OSV
OSV
added 2024/02/13 10:15 p.m.2 views

UBUNTU-CVE-2023-6152

A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verifyemailenabled" will only validate email only on sign up...

5.4CVSS7.1AI score0.01385EPSS
Exploits1References4
Hacker One
Hacker One
added 2024/01/28 2:57 p.m.19 views

Sheer: Cleartext Transmission of password via Email

The password was sent to the user's email in cleartext after successful signup as a fan...

7.2AI score
Exploits0
OSV
OSV
added 2024/01/22 4:15 p.m.2 views

CVE-2024-0781

A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pagesclientsignup.php. The manipulation of the argument Client Full Name with the input leads to open redirect. It is possible to initiate the attack...

6.1CVSS5.1AI score0.00514EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/01/22 4:0 p.m.3 views

CVE-2024-0781 CodeAstro Internet Banking System pages_client_signup.php redirect

A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pagesclientsignup.php. The manipulation of the argument Client Full Name with the input leads to open redirect. It is possible to initiate the attack...

4CVSS7.1AI score0.00514EPSS
Exploits1References3
OSV
OSV
added 2024/01/22 12:15 a.m.2 views

CVE-2024-0773

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Affected by this vulnerability is an unknown functionality of the file pagesclientsignup.php. The manipulation of the argument Client Full Name leads to cross site scripting. The attack can be launched...

5.4CVSS3.8AI score0.00562EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/01/22 12:0 a.m.3 views

CodeAstro Internet Banking System Input Validation Error Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. An input validation error vulnerability exists in CodeAstro Internet Banking System version 1.0, which stems from the inclusion of an unknown section in pagesclientsignup.php, where the use of a specific input via th...

6.1CVSS6.8AI score0.00514EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/01/21 12:0 a.m.7 views

PT-2024-15809 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A problematic vulnerability was found in the CodeAstro Internet Banking System, affecting an unknown functionality of the file pages client signup.php. The manipulation of the Client...

5.4CVSS6.9AI score0.00562EPSS
Exploits1References7
Cvelist
Cvelist
added 2024/01/09 9:31 p.m.23 views

CVE-2024-0347 SourceCodester Engineers Online Portal signup_teacher.php weak password

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file signupteacher.php. The manipulation of the argument Password leads to weak password requirements. The attack may be initiated remotely. The...

3.7CVSS4.7AI score0.00921EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.4 views

PT-2024-15483 · Unknown · Sourcecodester Engineers Online Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A vulnerability was found in the processing of the file signup teacher.php, where the manipulation of the argument Password leads to weak password requirements. The attack may be...

3.7CVSS7.3AI score0.00921EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.4 views

Engineers Online Portal Security Breach

Engineers Online Portal is open source an online portal . It is developed using PHP, MySQL database, HTML, CSS, Javascript, jQuery, Ajax, Bootstrap and some other libraries. A security vulnerability exists in Engineers Online Portal version 1.0, which stems from the parameter Password in the file...

3.7CVSS6.8AI score0.00921EPSS
Exploits1References4
OSV
OSV
added 2024/01/08 8:15 p.m.3 views

CVE-2023-52200

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.This issue affects ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile &...

9.8CVSS5.8AI score0.0027EPSS
Exploits0References1
Prion
Prion
added 2024/01/08 8:15 p.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.This issue affects ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile &...

7.5CVSS7.2AI score0.0027EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/08 7:18 p.m.22 views

CVE-2023-52200 WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.This issue affects ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile &...

9.6CVSS9.6AI score0.0027EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.7 views

PT-2024-14466 · WordPress · Armember

Name of the Vulnerable Software and Affected Versions: ARMember – Membership Plugin affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF and Deserialization of Untrusted Data. This affects the membership plugin, content restriction, member levels,...

9.8CVSS9.3AI score0.0027EPSS
Exploits0References6
OSV
OSV
added 2024/01/04 3:15 p.m.3 views

CVE-2023-50867

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00672EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/04 12:0 a.m.3 views

Travel Website SQL Injection Vulnerability

Travel Website is a PHP-based travel website. A SQL injection vulnerability exists in Travel Website v1.0, which occurs when the username parameter of the signupAction.php page is processed without filtering before sending the data to the database for processing...

9.8CVSS7.9AI score0.00672EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/12/26 12:0 a.m.27 views

CVE-2023-7108 code-projects E-Commerce Website user_signup.php cross site scripting

A vulnerability classified as problematic has been found in code-projects E-Commerce Website 1.0. This affects an unknown part of the file usersignup.php. The manipulation of the argument firstname with the input leads to cross site scripting. It is possible to initiate the attack remotely. The...

5CVSS4.7AI score0.00833EPSS
Exploits1References3
Rows per page
Query Builder