CVE-2020-23811

xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java...

CVE-2020-23830

A Cross-Site Request Forgery CSRF vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site...

CVE-2020-23830

A Cross-Site Request Forgery CSRF vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site...

CVE-2020-23830

A Cross-Site Request Forgery CSRF vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site...

openSIS SQL Injection Vulnerability (CNVD-2020-50955)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the usernamestfemail parameter in the password reset page /opensis/ResetUserInfo.php in OS4Ed openSIS 7.3, which can be exploited by an attacker to obtain information by...

openSIS SQL Injection Vulnerability (CNVD-2020-50954)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the uname parameter in the password reset page /opensis/ResetUserInfo.php in OS4Ed openSIS 7.3, which can be exploited by an attacker to obtain information by sending an...

openSIS Remote Code Execution Vulnerability (CNVD-2020-50534)

openSIS is a free, open source student information system/school management software. A remote code execution vulnerability exists in the install function in openSIS 7.4. An attacker can exploit this vulnerability by sending an HTTP request to inject PHP code into the Data.php file via the userna...

CVE-2020-13946

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and...

MediaWiki Resource Management Error Vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A resource management error vulnerability exists in Scratch Login versions...

CVE-2020-15164

CVE-2020-15164 affects Scratch Login (MediaWiki extension). Before v1.1, an attacker could log into any account by using a username with leading, trailing, or repeated underscores, which MediaWiki trims as whitespace. Root cause: underscores are treated as whitespace and trimmed, enabling authent...

CVE-2020-24390

eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/adminlogs page, which might allow pre-authentication stored XSS during login/logout logs recording...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-6637

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php...

Sql injection

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php...

CVE-2020-6637

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php...

CVE-2020-6637

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php...

Vehicle Parking Management System Authentication Bypass Vulnerability

Vehicle Parking Management System is a PHP + MySQL based parking management system. An authentication bypass vulnerability exists in Vehicle Parking Management System 1.0. The vulnerability can be exploited to bypass authentication via "Username: admin' && Password: Write Something"...

Student Management System Authentication Bypass Vulnerability

Student Management System is an online student management system that helps schools manage and track information about each student. An authentication bypass vulnerability exists in Student Management System 1.0. The vulnerability can be exploited to bypass authentication via "Username: admin' &&...