16297 matches found
CVE-2022-28468
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
CVE-2022-27124
Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
Sql injection
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
CVE-2022-27124
CVE-2022-27124 affects Insurance Management System 1.0, with a SQL injection vulnerability exposed via the username parameter. The root cause is a flaw in input handling that allows a crafted username to manipulate SQL queries. Public documentation lists this vulnerability across multiple feeds (...
CVE-2022-27124
Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
PT-2022-18233 · Unknown · Insurance Management System
Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter. Recommendations: For Insurance Management System version 1.0, consider...
CVE-2022-28468: Improper Neutralization of Special Elements used in an SQL Command
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
SQL Injection Vulnerability in Payroll Management System
Payroll Management System is a payroll management system by Carlo Montero Personal Developer. A security vulnerability exists in Payroll Management System v1.0, which allows an attacker to perform SQL injection via the username parameter...
Insurance Management System SQL Injection Vulnerability
Insurance Management System is an insurance management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in Insurance Management System 1.0, which allows an attacker to perform SQL injection via the username parameter...
CVE-2022-27124: Improper Neutralization of Special Elements used in an SQL Command
Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
PT-2022-19046
Name of the Vulnerable Software and Affected Versions Payroll Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter. Recommendations For Payroll Management System version 1.0, update to a...
CVE-2021-43462
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
CVE-2021-43462
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
CVE-2021-43462
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
CVE-2021-43462
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
Cross site scripting
A cross-site scripting XSS vulnerability in /public/admin/index.php?adduser at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text field...
CVE-2021-43462: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
PT-2022-11849 · Unknown · Rumble Mail Server
Name of the Vulnerable Software and Affected Versions: Rumble Mail Server version 0.51.3135 Description: A Cross Site Scripting XSS issue exists via the username parameter. Recommendations: For Rumble Mail Server version 0.51.3135, consider restricting access to the login functionality until a...
PT-2022-18427
Name of the Vulnerable Software and Affected Versions Ecommerce-Website version 1.1.0 Description A cross-site scripting XSS issue exists in the /public/admin/index.php?add user endpoint, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username...