PT-2023-15591 · Unknown · Online Student Admission System

Name of the Vulnerable Software and Affected Versions: Online Student Admission System in PHP Free Source Code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter. Recommendations: For Online Student...

CVE-2022-48149: Improper Neutralization of Special Elements used in an SQL Command

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

FantasticLBP Hotels Server SQL注入漏洞

FantasticLBP Hotels Server is a backend management system for hotel reservation systems. A security vulnerability exists in FantasticLBP Hotels Server v1.0 that allows an attacker to execute arbitrary code via the username parameter...

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

PT-2023-12228

Name of the Vulnerable Software and Affected Versions FantasticLBP Hotels Server version 1.0 Description The issue allows an attacker to execute arbitrary code via the username parameter, which is vulnerable to SQL injection. This enables the attacker to potentially access and manipulate sensitiv...

CVE-2021-33948: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

CVE-2021-34117

SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information...

CVE-2022-45543

Cross site scripting XSS vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search...

CVE-2023-0840

A vulnerability classified as problematic was found in PHPCrazy 1.1.1. This vulnerability affects unknown code of the file admin/admin.php?action=users&mode=info&user=2. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has...

SUSE CVE-2007-5702

Cross-site scripting XSS vulnerability in swamp/action/LoginActions aka the login box in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtaine...

UBUNTU-CVE-2022-47373

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript...

PT-2023-16561 · Phpcrazy · Phpcrazy

Name of the Vulnerable Software and Affected Versions: PHPCrazy version 1.1.1 Description: A problematic vulnerability was found in PHPCrazy, affecting the file "admin/admin.php?action=users&mode=info&user=2". The manipulation of the username argument leads to cross-site scripting. The attack can...

CVE-2022-45543

Cross site scripting XSS vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search...

PT-2023-15288 · Unknown · Pandora Fms Console

Name of the Vulnerable Software and Affected Versions: Pandora FMS Console versions prior to v767 Description: The issue arises from a Reflected Cross Site Scripting vulnerability in the Search Functionality of the Module Library. This vulnerability is triggered by the forget password...

CVE-2022-47373: Cross-Site Request Forgery (CSRF)

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript...

CVE-2021-34117: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information...

PHPCrazy 跨站脚本漏洞

PHPCrazy is a PHP-based website builder program written by the individual developer of Crazy-code. A cross-site scripting vulnerability exists in PHPCrazy version 1.1.1, which stems from the fact that incorrect manipulation of the parameter username can lead to cross-site scripting...