Sql injection

Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...

CVE-2024-24133

Affected software: Atmail v6.6.0. Vulnerability: SQL injection via the username parameter on the login page. Root cause: improper handling of the username input leading to SQL injection (high/critical impact). CVSSv3.1 metrics indicate: Network attack vector, no privileges required, user interact...

CVE-2024-24133: Improper Neutralization of Special Elements used in an SQL Command

Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...

PT-2024-20286 · Atmail · Atmail

Name of the Vulnerable Software and Affected Versions: Atmail version 6.6.0 Description: The issue is a SQL injection vulnerability that can be exploited via the username parameter on the login page. Recommendations: For Atmail version 6.6.0, avoid using the username parameter in the login page...

CVE-2024-24133

Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...

CVE-2023-42765

An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" parameter in the SNMP configuration...

Cross site scripting

An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" parameter in the SNMP configuration...

PT-2024-13056 · Westermo · Lynx +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the username parameter in the SNMP configuration...

CVE-2023-42765: Improper Neutralization of Input During Web Page Generation

An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" parameter in the SNMP configuration...

PT-2024-17458

Name of the Vulnerable Software and Affected Versions SourceCodester CRUD without Page Reload version 1.0 Description A vulnerability was found in the file fetch data.php, where the manipulation of the username or city argument leads to cross-site scripting. The attack may be launched remotely...

CRUD Without Page Reload/Refresh Cross-Site Scripting Vulnerability

sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial is an open source project to help people learn how to build or develop a PHP CRUD without Refresh/Reload using Ajax and DataTables. CRUD Without Page Reload/Refresh version 1.0 suffers from a cross-site scripting...

Gabriels FTP Server Security Vulnerability

Gabriels FTP Server is a lightweight FTP service. A security vulnerability exists in Gabriels FTP Server version 1.2, which stems from the software containing unknown processing that can cause a denial of service via the parameter USERNAME...

JFinal Cross-Site Scripting Vulnerability

JFinal is a Java language based WEB + ORM open source framework. A cross-site scripting vulnerability exists in JFinal version 5.0.0, which originates from allowing an attacker to run arbitrary code via the /admin/login username parameter...

PT-2024-19452 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: A Cross Site Scripting XSS issue allows attackers to execute arbitrary code by exploiting the username parameter in the "/admin/login" API endpoint. Recommendations: For JFinalcms version 5.0.0, avoid usin...

CVE-2024-22496

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

CVE-2024-22496

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

CVE-2024-22496: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

EFS Software Easy File Sharing (EFS) Web Server Security Vulnerability

Efs Software EFS Software Easy File Sharing EFS Web Server is a suite of file sharing software from the Dutch company Efs Software. The software includes a forum site, file uploading, downloading, sharing and image sharing. A security vulnerability exists in EFS Software Easy File Sharing EFS Web...

Efs Software EFS Easy Chat Server Security Vulnerability

Efs Software EFS Easy Chat Server is a suite of online chat server software from the Dutch company Efs Software. A security vulnerability exists in EFS Easy Chat Server version 3.1 due to a denial of service DOS vulnerability in the parameter USERNAME of the component HTTP GET Request Handler...

PT-2024-15756 · Unknown · Efs Easy Chat Server

Name of the Vulnerable Software and Affected Versions: EFS Easy Chat Server version 3.1 Description: A problematic issue has been found in the HTTP GET Request Handler component of the affected software. The manipulation of the USERNAME argument leads to denial of service. This issue can be...