16297 matches found
CVE-2022-30328
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change the username and password of the interface...
CVE-2021-41487
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'...
CVE-2021-41487
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'...
CVE-2021-41487
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'...
Sql injection
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'...
CVE-2021-41487
CVE-2021-41487 affects Nokia VitalSuite SPM 2020. The vulnerability is an SQL injection in the UserName parameter, caused by improper input handling that allows an attacker to inject SQL commands. In the sources, exploitation is described as remote and capable of affecting confidentiality, integr...
CVE-2021-41487
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'...
Nokia VitalSuite SPM SQL Injection Vulnerability
NOKIA VitalSuite SPM is a multi-vendor, multi-application performance management solution from Nokia Finland. A security vulnerability exists in NOKIA VitalSuite SPM version 2020. An attacker exploited the vulnerability to perform SQL injection via UserName...
CVE-2021-41487: Improper Neutralization of Special Elements used in an SQL Command
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'...
PT-2022-3278
Name of the Vulnerable Software and Affected Versions LDAP Account Manager versions prior to 8.0 Description The issue exists due to the lack of neutralization of special elements in the LDAP Account Manager web application, allowing a remote attacker to use the username field to enumerate LDAP...
PT-2022-11418
Name of the Vulnerable Software and Affected Versions NOKIA VitalSuite SPM version 2020 Description The issue is related to SQL injection through the UserName variable. This allows for potential unauthorized access or manipulation of data. Recommendations For NOKIA VitalSuite SPM version 2020,...
Cross-site Scripting (XSS)
facturascripts/facturascripts is vulnerable to cross site scripting. The vulnerability exists due to a lack of sanitization of the username field allowing an attacker to input maliciously crafted script via the username field when showing 'login-user-not-found' message...
Employee Leaves Management System Cross-Site Request Forgery Vulnerability
Employee Leaves Management System ELMS is an internal employee management system. A cross-site request forgery vulnerability exists in Employee Leaves Management System ELMS v2.1, which can be exploited by an attacker to change the details of any user profile, such as username, phone number, etc...
CVE-2022-33174
Power Distribution Units running on Powertek firmware multiple brands before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an emp...
CVE-2022-23168
The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--...
Sql injection
The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--...
CVE-2022-32741
Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...
CVE-2022-32741
Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...
