CVE-2022-36161

CVE-2022-36161 affects Orange Station 1.0, with a SQL injection vulnerability exploitable via the username parameter. Root cause: improper handling of user input in the login/authentication flow leading to SQL injection. Potential impact: unauthorized access and data disclosure if exploited (as d...

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

PT-2022-23239 · Unknown · Orange Station

Name of the Vulnerable Software and Affected Versions: Orange Station version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter. Recommendations: For Orange Station version 1.0, update to a version that includes ...

CVE-2022-29709

CommuniLink Internet Limited CLink Office v2.0 was discovered to contain multiple SQL injection vulnerabilities via the username and password parameters...

CVE-2022-29709

CommuniLink Internet Limited CLink Office v2.0 was discovered to contain multiple SQL injection vulnerabilities via the username and password parameters...

Sql injection

CommuniLink Internet Limited CLink Office v2.0 was discovered to contain multiple SQL injection vulnerabilities via the username and password parameters...

Communilink CLink Office SQL注入漏洞

Communilink CLink Office is a control panel for unified management of email and anti-spam filters from Communilink, Hong Kong, China. A security vulnerability exists in CommuniLink CLink Office version v2.0. The vulnerability is exploited by attackers to conduct SQL injection attacks via the...

Garage Management System SQL注入漏洞

SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It can help you manage all your vehicles, cars and motorcycles. A security vulnerability exists in Garage Management System 1.0, which stems from unknown code affecting the file...

KB Affiliate Referral Script SQL注入漏洞

KB Affiliate Referral Script is a 3-tier referral system by Kunal Bansal Personal Developer. A security vulnerability exists in KB Messages PHP Script version 1.0, which can be exploited by an attacker to perform sql injection using the username/password parameters. The attack method is publicly...

CVE-2022-32056

Online Accreditation Management v1.0 was discovered to contain a SQL injection vulnerability via the USERNAME parameter at process.php...

CVE-2022-32056

Online Accreditation Management v1.0 was discovered to contain a SQL injection vulnerability via the USERNAME parameter at process.php...

CVE-2022-32056

Online Accreditation Management v1.0 was discovered to contain a SQL injection vulnerability via the USERNAME parameter at process.php...

Online Accreditation Management SQL注入漏洞

Online Accreditation Management is an online accreditation management system from the individual developer Adones Evangelista. A security vulnerability exists in Online Accreditation Management v1.0, which originates from an SQL injection vulnerability discovered via the USERNAME parameter in...

CVE-2021-41487

NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'...

NOKIA VitalSuite SPM SQL注入漏洞

NOKIA VitalSuite SPM is a multi-vendor, multi-application performance management solution from Nokia Finland. A security vulnerability exists in NOKIA VitalSuite SPM version 2020. An attacker exploited the vulnerability to perform SQL injection via UserName...

CVE-2022-23168

The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--...

Sql injection

The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--...

CVE-2022-29732

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting XSS vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Cross site scripting

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting XSS vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Delta Controls enteliTOUCH 跨站脚本漏洞

Delta Controls enteliTOUCH is a touchscreen building controller from Delta Controls Canada. A security vulnerability exists in Delta Controls enteliTOUCH versions 3.40.3935, 3.40.3706, and 3.33.4005, which stems from a cross-site scripting vulnerability discovered via the Username parameter. The...