85 matches found
SourceCodester Employee Management System SQL Injection Vulnerability
SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A SQL injection vulnerability exists in SourceCodester Employee Management System version 1.0, which is caused by a sql injection in the txtusername parameter of...
CVE-2024-1009: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be launched remotely. T...
Covid-19 Directory: Vaccination System SQL Injection Vulnerability
The Covid-19 Directory On Vaccination System is a COVID-19 information management system by an individual developer in Ndueso Okorie, Nigeria. The system will accurately store and retrieve information about COVID-19 vaccinations to control the spread of a pandemic. A SQL injection vulnerability...
CVE-2023-1352: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. This issue affects some unknown processing of the file /admin/login.php. The manipulation of the argument txtusername/txtpassword leads to...
CVE-2022-3414: Improper Neutralization
A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. Affected is an unknown function of the file /Admin/login.php of the component POST Parameter Handler. The manipulation of the argument txtusername leads to sql injection. It is...
Web-Based Student Clearance System SQL Injection Vulnerability
Web-Based Student Clearance System is a web-based student clearance system from the personal developer Ndueso Okorie.A SQL injection vulnerability exists in Web-Based Student Clearance System, which stems from the lack of validation of external input SQL statements in the parameter txtusername in...
CVE-2022-28531: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...
PT-2022-19069
Name of the Vulnerable Software and Affected Versions Sourcecodester Covid-19 Directory on Vaccination System version 1.0 Description The system is susceptible to SQL Injection attacks through the txtusername field, also known as the Username field, located in the admin/login.php endpoint. This...
SourceCodester Online Clothing Store SQL Injection Vulnerability
SourceCodester Online Clothing Store is a website builder system from SourceCodester, Inc. that provides online clothing store functionality. A SQL injection vulnerability exists in SourceCodester version 1.0. The vulnerability stems from the program failing to properly validate user input, which...
CVE-2020-28138
SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...
Sql injection
SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...
CVE-2020-28138
SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection in login.php via the txtUserName parameter. Root cause: improper input validation allowing SQL injection. Impact: as per CVE metrics, potential execution of arbitrary SQL with high/critical severity; remote attacker could man...
CVE-2020-28138: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...
PT-2020-16933
Name of the Vulnerable Software and Affected Versions SourceCodester Online Clothing Store version 1.0 Description The issue is related to a SQL Injection vulnerability. It occurs via the txtUserName parameter to the "login.php" endpoint. Recommendations For SourceCodester Online Clothing Store...
SourceCodester Online Clothing Store SQL Injection Vulnerability
SourceCodester Online Clothing Store is a website builder system from SourceCodester, Inc. that provides online clothing store functionality. A SQL injection vulnerability exists in SourceCodester version 1.0. The vulnerability stems from the program failing to properly validate user input, which...
Sql injection
SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...
CVE-2015-4043: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...
PT-2018-4374
Name of the Vulnerable Software and Affected Versions ConnX ESP HR Management version 4.4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ctl00$cphMainContent$txtUserName parameter in the /frmLogin.aspx API endpoint...
SQL Injection Vulnerability in City Lighting Wireless Control System of China Electronics Technology Group Corporation
China Electronics Technology Group Corporation CETC is a state-owned large-scale high-tech enterprise group established on the basis of electronic research institutes and high-tech enterprises directly under the former Ministry of Information Industry. A SQL injection vulnerability exists in the...
