2961 matches found
PT-2024-27783 · Unknown · Itsourcecode Billing System
Name of the Vulnerable Software and Affected Versions: itsourcecode Billing System version 1.0 Description: A SQL Injection issue allows a local attacker to execute arbitrary code in process.php via the username parameter. Recommendations: For itsourcecode Billing System version 1.0, consider...
Sourcecodester Stock Management System SQL Injection Vulnerability
Sourcecodester Stock Management System is an inventory management system. A SQL injection vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from an unknown function in index.php in the component Login that allows an attacker to perform SQL injection via...
CVE-2024-3102 JSON Injection in mintplex-labs/anything-llm
A JSON Injection vulnerability exists in the mintplex-labs/anything-llm application, specifically within the username parameter during the login process at the /api/request-token endpoint. The vulnerability arises from improper handling of values, allowing attackers to perform brute force attacks...
CVE-2024-3102: Improper Restriction of Excessive Authentication Attempts
A JSON Injection vulnerability exists in the mintplex-labs/anything-llm application, specifically within the username parameter during the login process at the /api/request-token endpoint. The vulnerability arises from improper handling of values, allowing attackers to perform brute force attacks...
PT-2024-23727 · Mintplex · Anything-Llm
Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm affected versions not specified Description: A JSON Injection issue exists in the application, specifically within the username parameter during the login process at the "/api/request-token" endpoint. This issue...
CVE-2024-35511
phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/index.php...
CVE-2024-35511
phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/index.php...
CVE-2024-35511: Improper Neutralization of Special Elements used in an SQL Command
phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/index.php...
Exploit for SQL Injection in Phpgurukul Men_Salon_Management_System
PHPGurukul Men Salon Management System 2.0 + Welcome to the PH...
Event Registration System SQL注入漏洞
Event Registration System is a QR code based event registration system by Carlo Montero, an individual developer. An SQL injection vulnerability exists in Event Registration System version 1.0, which originates from an unknown function in Portal.php that causes SQL injection via the...
Tenant Limited 1.0 SQL Injection
Titles: TENANT-LIMITED-1.0 SQLi Author: nu11secur1ty Date: 05/20/2024 Vendor: https://mayurik.com/ Software: https://www.sourcecodester.com/php/17375/best-courier-management-system-project-php.html Reference: https://portswigger.net/web-security/sql-injection Description: The username parameter...
Directory Management System SQL注入漏洞
Directory Management System is a directory management system by the individual developer Anuj Kumar. A SQL injection vulnerability exists in Directory Management System version 1.0, which originates from an unknown function in /admin/index.php that causes SQL injection via the parameter username...
Simple Inventory System SQL注入漏洞
Simple Inventory System is a simple inventory system by argie individual developer. SourceCodester Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from the parameter username in the file login.php...
PT-2024-34483 · Unknown · Sourcecodester Simple Inventory System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Inventory System version 1.0 Description: A critical issue has been found in the SourceCodester Simple Inventory System, affecting an unknown functionality of the file login.php. The manipulation of the username argument...
Online Course Registration System 安全漏洞
Online Course Registration System is an online course registration system by the individual developer ANUJ KUMAR. A security vulnerability exists in PHPGurukul Online Course Registration System version 3.1, which originates from the parameters username/password in the file /admin/index.php that c...
GHSA-93PF-MRC8-4G3H Konga is vulnerable to Cross Site Scripting (XSS) attacks
Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...
Konga is vulnerable to Cross Site Scripting (XSS) attacks
Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...
CVE-2024-34243
Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...
CVE-2024-4822
Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session...
