15 matches found
EUVD-2022-48197
Malicious code in bioql PyPI...
CVE-2022-45297
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
Open Redirect
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Open Redirect due to the cURL wrapper behavior, in Moodle stripped HTTPAUTH and USERPWD headers, during emulated redirects. Remediation Upgrade moodle/moodle to version 4.4.2, 4.3.6, 4.2.9, 4.1.12 o...
CVE-2024-43432: Cleartext Transmission of Sensitive Information
A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs...
CVE-2022-45297
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
CVE-2022-45297
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
Sql injection
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
PT-2023-14640 · Eq · Eq
Name of the Vulnerable Software and Affected Versions: EQ versions 1.5.31 through 2.2.0 Description: The issue is a SQL injection vulnerability that can be exploited via the UserPwd parameter. This allows for potential unauthorized access to sensitive data. Recommendations: For EQ versions 1.5.31...
EQ SQL injection vulnerability
EQ is an enterprise management system by tlfyyds individual developer. A security vulnerability exists in EQ versions v1.5.31 through v2.2.0, which stems from the presence of SQL injection via the UserPwd parameter...
CVE-2022-45297
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
CVE-2022-45297
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
CVE-2022-45297
EQ Enterprise Management System versions 1.5.31 to 2.2.0 contain a SQL injection vulnerability exploitable via the UserPwd parameter. The flaw arises in the login/auth flow and can enable unauthorized access to sensitive data (high confidentiality/integrity/availability impact per CVSS 3.1). Publ...
CVE-2022-45297: Improper Neutralization of Special Elements used in an SQL Command
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
PT-2020-3019
Name of the Vulnerable Software and Affected Versions curl versions 7.62.0 through 7.70.0 Description The issue is related to errors in handling credentials, which can lead to a partial password being leaked over the network and to the DNS servers. This occurs when libcurl is tricked into...
Micro Login System v 1.0 Read password
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 蒸...