Computer Parts Sales and Inventory System 跨站脚本漏洞

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which stems from an unknown function present in...

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which was discovered to contain an SQL injection vulnerability via the username parameter...

CVE-2023-1360

A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affects some unknown processing of the file classes/Users.php?f=save of the component New User Creation. The manipulation of the argument username leads to sql...

SourceCodester Employee Payslip Generator with Sending Mail SQL注入漏洞

Employee Payslip Generator with Sending Mail is an Employee Payslip Generator with Sending Mail by Carlo Montero Personal Developer. SourceCodester Employee Payslip Generator with Sending Mail version 1.2.0 suffers from a SQL injection vulnerability that stems from an incorrect manipulation of th...

Simple Bakery Shop Management SQL注入漏洞

Simple Bakery Shop Management is a bakery store management system. A SQL injection vulnerability exists in SourceCodester Simple Bakery Shop Management System version 1.0, which stems from a SQL injection vulnerability in the parameter sername/password...

PT-2023-16926 · Sourcecodester · Sourcecodester Gadget Works Online Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gadget Works Online Ordering System version 1.0 Description: A vulnerability has been found in the SourceCodester Gadget Works Online Ordering System, affecting the component Add New User. The issue is related to the manipulati...

The vulnerability of the TeamPass password manager, related to improper external management of the username or file path, allows attackers to delete any files they desire.

The vulnerability of the TeamPass password manager is related to improper external management of the username or file path. Exploiting this vulnerability allows a malicious actor to delete any files at will...

CVE-2023-1294

A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown function of the file /filemanager/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is...

SourceCodester Sales Tracker Management System SQL注入漏洞

Sales Tracker Management System is a sales tracker management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Sales Tracker Management System version 1.0 due to unknown functionality in the file filemanager/login.php in the component POST Paramet...

PT-2023-16868 · Sourcecodester · Sourcecodester File Tracker Manager System

Name of the Vulnerable Software and Affected Versions: SourceCodester File Tracker Manager System version 1.0 Description: A critical issue has been found in the SourceCodester File Tracker Manager System. The problem lies in an unknown function of the file /file manager/login.php, specifically i...

Observable Response Discrepancy

vantage6server is vulnerable to Observable Response Discrepancy. The vulnerability exists because the login requirement is not properly implemented which allows an attacker to brute force password and observe a valid username response...

Atlassian Jira 8.6.0 < 8.13.6 Username Enumeration

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.14, 8.6.x prior to 8.13.6 or 8.14.x prior to 8.16.1. It is, therefore, affected by a vulnerability that permits remote attackers to discover the username of users via an...

Health Center Patient Record Management System SQL注入漏洞

Health Center Patient Record Management System is a Health Center Patient Record Management System by Arvin Arandilla Individual Developer. A SQL injection vulnerability exists in SourceCodester Health Center Patient Record Management System version 1.0, which stems from a problem in the file...

PT-2023-16841 · Sourcecodester · Health Center Patient Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A critical issue was found in the login.php file, where the manipulation of the username argument leads to sql injection. This issue can be exploited...

CVE-2023-1200 ehuacui bbs cross site scripting

A vulnerability was found in ehuacui bbs. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This...

PT-2023-16815 · Unknown · Ehuacui Bbs

Name of the Vulnerable Software and Affected Versions: ehuacui bbs affected versions not specified Description: A vulnerability was found in ehuacui bbs, which has been declared as problematic. The manipulation of the username argument leads to cross-site scripting. The attack can be initiated...

ehuacui-bbs 跨站脚本漏洞

ehuacui-bbs is an open source bbs forum system by ehuacui. A cross-site scripting vulnerability exists in ehuacui-bbs, which stems from cross-site scripting due to incorrect manipulation of the username parameter...

CVE-2023-25403

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. Any user who logged in within 24 hours. A token can be forged with his username to bypass authentication...

CVE-2023-25403

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. Any user who logged in within 24 hours. A token can be forged with his username to bypass authentication...

PYSEC-2023-313

Withdrawn as duplicate of PYSEC-2023-52 vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform the user of wrong username/password combination if the username actually exists. This is an attempt to prevent bots from obtaining...