16260 matches found
CVE-2023-23749: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing the 'username' POST parameter. An attacker can manipulate this paramter to dump arbitrary contents form the LDAP Database...
CVE-2015-10055
A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes/user.js. The manipulation of the argument username/password leads to sql injection. The patch is named 68b9dc346e88b494df00d88c7d058e96820e1479. It is...
PT-2023-10234 · Unknown · Picturethiswebserver
Name of the Vulnerable Software and Affected Versions: PictureThisWebServer affected versions not specified Description: A critical issue affects the function router.post of the file routes/user.js. The manipulation of the arguments username and password leads to sql injection. Recommendations:...
KesionCMS X 1.5.160902 Insecure Settings
==================================================================================================================================== | Title : KesionCMS X 1.5.160902 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
PictureThisWebServer SQL Injection Vulnerability
PictureThisWebServer is a web project. PictureThisWebServer suffers from a SQL injection vulnerability that stems from a security issue in the function router.post in the file routes/user.js, where manipulation of the parameter username/password leads to SQL injection...
CVE-2015-10055: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes/user.js. The manipulation of the argument username/password leads to sql injection. The patch is named 68b9dc346e88b494df00d88c7d058e96820e1479. It is...
PT-2023-16160 · Unknown · Sourcecodester Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical vulnerability was found in the SourceCodester Online Food Ordering System, affecting the Login Module in the file admin class.php. The...
SQL Injection Vulnerability in Online Food Ordering Systems
SourceCodester Online Food Ordering System is an online food ordering system. A SQL injection vulnerability exists in SourceCodester Online Food Ordering System, which stems from a problem with unknown code in the file adminclass.php, where an operation on the parameter username can lead to sql...
PT-2023-12636
Name of the Vulnerable Software and Affected Versions publify/publify versions prior to 9.2.10 Description The issue is related to an integer overflow or wraparound in the publify/publify GitHub repository. This is due to an unlimited length user name field. Recommendations For versions prior to...
CVE-2022-46502
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...
CVE-2022-46502
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...
CVE-2022-46502: Improper Neutralization of Special Elements used in an SQL Command
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...
Online Student Enrollment System SQL Injection Vulnerability
Online Student Enrollment System is an online student enrollment system developed by Lyndon Bermoy, an individual developer. A security vulnerability exists in Online Student Enrollment System v1.0, which stems from a username parameter in its /studentenrollment/admin/login.php file that allows a...
NVIDIA BMC security vulnerabilities
NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could guess a valid BMC username, which could lead to information disclosure...
CVE-2022-46502
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...
CVE-2022-46502
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...
CVE-2022-46623
Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter...
CVE-2022-46623
Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter...
Sql injection
A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /fos/admin/ajax.php?action=login of the component Login Page. The manipulation of the argument Username leads to sql injection. It is possib...