14 matches found
EUVD-2022-48197
Malicious code in bioql PyPI...
CVE-2022-45297
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
Open Redirect
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Open Redirect due to the cURL wrapper behavior, in Moodle stripped HTTPAUTH and USERPWD headers, during emulated redirects. Remediation Upgrade moodle/moodle to version 4.4.2, 4.3.6, 4.2.9, 4.1.12 o...
CVE-2024-43432: Cleartext Transmission of Sensitive Information
A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs...
CVE-2022-45297
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
CVE-2022-45297
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
Sql injection
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
PT-2023-14640 · Eq · Eq
Name of the Vulnerable Software and Affected Versions: EQ versions 1.5.31 through 2.2.0 Description: The issue is a SQL injection vulnerability that can be exploited via the UserPwd parameter. This allows for potential unauthorized access to sensitive data. Recommendations: For EQ versions 1.5.31...
CVE-2022-45297: Improper Neutralization of Special Elements used in an SQL Command
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
CVE-2022-45297
EQ Enterprise Management System versions 1.5.31 to 2.2.0 contain a SQL injection vulnerability exploitable via the UserPwd parameter. The flaw arises in the login/auth flow and can enable unauthorized access to sensitive data (high confidentiality/integrity/availability impact per CVSS 3.1). Publ...
CVE-2022-45297
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
CVE-2022-45297
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
EQ SQL注入漏洞
EQ is an enterprise management system by tlfyyds individual developer. A security vulnerability exists in EQ versions v1.5.31 through v2.2.0, which stems from the presence of SQL injection via the UserPwd parameter...
Micro Login System v 1.0 Read password
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 蒸...