2961 matches found
CVE-2024-44541
evilnapsis Inventio Lite versions v4 and before are vulnerable to SQL Injection in the /?action=processlogin endpoint. The root cause is the improper neutralization of special elements in the username parameter, which allows attackers to inject arbitrary SQL queries via POST requests. This flaw c...
CVE-2024-44541
evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...
Inventio Lite SQL注入漏洞
Inventio Lite is a general purpose inventory and sales system. A security vulnerability exists in Inventio Lite v4 and prior versions that stems from vulnerability to SQL injection attacks via the username parameter in /?action=processlogin...
CVE-2024-44541: Improper Neutralization of Special Elements used in an SQL Command
evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...
PT-2024-31169
Name of the Vulnerable Software and Affected Versions Inventio Lite versions v4 and before Description The issue concerns a SQL Injection vulnerability. It can be exploited via the username parameter in the "/?action=processlogin" API endpoint. There is no information provided about the estimated...
Hospital Management System user-login.php File SQL Injection Vulnerability
Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from an unknown function in the file user-login.php, where manipulation of the parameter username can lead to SQL injection. An attacker can use this...
CVE-2024-8569
A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file user-login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely...
Hospital Management System SQL注入漏洞
Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from an unknown function in the file user-login.php, where manipulation of the parameter username can lead to SQL injection. An attacker can use this...
PT-2024-31273
Name of the Vulnerable Software and Affected Versions RapidCMS version 1.3.1 Description A SQL injection issue was found in the username parameter at the "/resource/runlogin.php" API endpoint. This allows for potential exploitation. No information is provided about the estimated number of affecte...
CVE-2024-44838: Improper Neutralization of Special Elements used in an SQL Command
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php...
CVE-2024-44838
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php...
OpenRapid RapidCMS 安全漏洞
OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A security vulnerability exists in OpenRapid RapidCMS v1.3.1, which originates from a SQL injection vulnerability via the username parameter on /resource/runlogin.php...
CVE-2024-44838
The open-source RapidCMS content management system, specifically version v1.3.1 , is susceptible to a SQL injection vulnerability. The root cause is the improper neutralization of special elements in the username parameter located at the /resource/runlogin.php endpoint. Successful exploitation co...
CVE-2024-44838
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php...
CVE-2024-44838
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php...
CVE-2024-44727
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...
CVE-2024-44727
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...
CVE-2024-8471
Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through JOBID and USERNAME parameters in /jobportal/process.php...
PHPGurukul Job Portal 跨站脚本漏洞
PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A cross-site scripting vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the JOBID and USERNAME parameters in /jobportal/process.php...