CVE-2023-23015

Cross Site Scripting XSS vulnerability in Kalkun 0.8.0 via username input in file Usermodel.php...

CVE-2023-23015

Cross Site Scripting XSS vulnerability in Kalkun 0.8.0 via username input in file Usermodel.php...

CVE-2022-48126

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function...

xcash 1.5 Insecure Settings

==================================================================================================================================== | Title : xcash V1.5 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 103.064-bit | |...

PT-2023-10247 · Danynab · Movify-J

Name of the Vulnerable Software and Affected Versions: danynab movify-j affected versions not specified Description: A critical vulnerability was found in danynab movify-j, affecting the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument...

OpenLDAP 注入漏洞

OpenLDAP is an open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Foundation in the United States. A security vulnerability exists in the Joomla plugin LDAP Integration with Active Directory and OpenLDAP that stems from not properly cleaning the POST...

VulnCheck KEV: CVE-2022-39197

Fortra Cobalt Strike contains a cross-site scripting XSS vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely...

Active Matrimonial CMS 3.5 Insecure Settings

==================================================================================================================================== | Title : Active Matrimonial CMS v3.5 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

PT-2023-19173 · Unknown · Ldap Integration

Name of the Vulnerable Software and Affected Versions: LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login affected versions not specified Description: The issue arises from the extension not properly sanitizing the username POST parameter, leading to LDAP Injection. This...

PT-2023-10234 · Unknown · Picturethiswebserver

Name of the Vulnerable Software and Affected Versions: PictureThisWebServer affected versions not specified Description: A critical issue affects the function router.post of the file routes/user.js. The manipulation of the arguments username and password leads to sql injection. Recommendations:...

PictureThisWebServer SQL注入漏洞

PictureThisWebServer is a web project. PictureThisWebServer suffers from a SQL injection vulnerability that stems from a security issue in the function router.post in the file routes/user.js, where manipulation of the parameter username/password leads to SQL injection...

KesionCMS X 1.5.160902 Insecure Settings

==================================================================================================================================== | Title : KesionCMS X 1.5.160902 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

PT-2023-16160 · Unknown · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical vulnerability was found in the SourceCodester Online Food Ordering System, affecting the Login Module in the file admin class.php. The...

Online Food Ordering System SQL注入漏洞

SourceCodester Online Food Ordering System is an online food ordering system. A SQL injection vulnerability exists in SourceCodester Online Food Ordering System, which stems from a problem with unknown code in the file adminclass.php, where an operation on the parameter username can lead to sql...

CVE-2022-46502

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...

CVE-2022-46502

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...

Online Student Enrollment System SQL注入漏洞

Online Student Enrollment System is an online student enrollment system developed by Lyndon Bermoy, an individual developer. A security vulnerability exists in Online Student Enrollment System v1.0, which stems from a username parameter in its /studentenrollment/admin/login.php file that allows a...

CVE-2022-46502

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...

NVIDIA BMC 安全漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could guess a valid BMC username, which could lead to information disclosure...

CVE-2022-46502

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...