GHSA-RVF8-C35M-8289 Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...

CVE-2021-34111

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

CVE-2021-34111

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

CVE-2022-29009

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication...

Directory Management System SQL注入漏洞

Directory Management System is a directory management system. SQL injection vulnerability exists in Directory Management System version 1.0, which stems from multiple SQL injection vulnerabilities in the username and password parameters in the administration panel. An attacker could use this...

CVE-2022-28110

Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page...

CVE-2022-28110

Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page...

CVE-2022-28110

CVE-2022-28110 : Hotel Management System v1.0 is vulnerable to a SQL injection via the username parameter on the login page. The issue allows injected SQL to affect data confidentiality, integrity, and availability (CVSSv3.1 base score 9.8, CRITICAL). Exploitation status or in‑the‑wild details ar...

Hotel Management System SQL注入漏洞

Hotel Management System is a MIS project based on a hotel management system. v1.0 of Hotel Management System is vulnerable to SQL injection, which stems from a login page whose username parameter was found to contain SQL injection. An attacker could exploit the vulnerability to perform SQL...

Delta Controls enteliTOUCH 3.40.3935 Cross Site Scripting

enteliTouch XSS alertdocument.cookie" /...

Delta Controls enteliTOUCH 3.40.3935 Cross Site Scripting Vulnerability

enteliTouch XSS alertdocument.cookie" / input type="hidden" n...

CVE-2022-28363

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/loginprocess username parameter via GET. No authentication is required...

Rumble Mail Server Cross-Site Scripting Vulnerability

Rumble Mail Server is a mail server suite for SMTP ESMTPSA, HTTP, POP3 and IMAP4v1 by Daniel Gruno, a personal developer.A cross-site scripting vulnerability exists in Rumble Mail Server version 0.51.3135, which stems from the username parameter's lack of data validation filtering for user The...

CVE-2022-28468

Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-27124

Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-27124

Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-28468

Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

Sql injection

Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-27124

Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-27124

CVE-2022-27124 affects Insurance Management System 1.0, with a SQL injection vulnerability exposed via the username parameter. The root cause is a flaw in input handling that allows a crafted username to manipulate SQL queries. Public documentation lists this vulnerability across multiple feeds (...