16297 matches found
Sql injection
An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter...
in heroiclabs/nakama
Description It is possible to enumerate usernames via the Log-In function. Proof of Concept The login response provides information, whether the username is registered or not in the application. If the user is registered, and wrong password provided, the following information being displayed:...
PT-2022-11271
Name of the Vulnerable Software and Affected Versions Sourcecodester Online Leave Management System version v1 Description The issue allows attackers to execute arbitrary SQL commands via the username parameter to the "/leave system/classes/Login.php" API endpoint. This enables attackers to...
PT-2022-12180
Name of the Vulnerable Software and Affected Versions Simple College Website version 1.0 Description The issue allows for unauthenticated file upload and remote code execution via UNION-based SQL injection in the username parameter on the "/admin/login.php" API endpoint. Recommendations For Simpl...
CVE-2021-40595: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...
CVE-2021-40247: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field...
PT-2022-12632 · Sourcecodester · Employee/Visitor Gate Pass Logging System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Employee and Visitor Gate Pass Logging System version 1.0 Description: An SQL Injection issue exists via the username parameter. Recommendations: For version 1.0, avoid using the username parameter in the affected API endpoint...
Sourcecodester Online Leave Management System SQL Injection Vulnerability
SourceCodester Online Leave Management System is an online leave management system. v1 of SourceCodester Online Leave Management System is vulnerable to SQL injection. system/classes/Login.php parameter lacks effective filtering and escaping, which can be exploited to execute arbitrary SQL comman...
Sourcecodester Employee and Visitor Gate Pass Logging System SQL Injection Vulnerability
SourceCodester Employee and Visitor Gate Pass Logging System is a simple web-based employee and visitor pass logging system that provides companies with an automated platform to track or log the daily records of employees and visitors entering a company building or premises. A SQL injection...
CVE-2021-44593: Improper Neutralization of Special Elements used in an SQL Command
Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the username parameter on /admin/login.php...
CVE-2021-46309: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter...
USN-5244-1 dbus vulnerability
Daniel Onaca discovered that DBus contained a use-after-free vulnerability, caused by the incorrect handling of usernames sharing the same UID. An attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service...
CVE-2021-44092
An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...
CVE-2021-44244
An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...
CVE-2021-44092
An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...
CVE-2021-44245
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...
CVE-2021-44245
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...
CVE-2021-44245
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...