CVE-2022-43119

A cross-site scripting XSS vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username parameter...

CVE-2022-43119: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username parameter...

sphere 跨站脚本漏洞

OpenSourceCMS.com Clansphere CMS is an OpenSourceCMS.com open source application. Provides a CMS framework for building websites. A cross-site scripting vulnerability exists in Clansphere CMS v2011.4. An attacker can exploit this vulnerability to execute arbitrary web script or HTML via a special...

PT-2022-26761 · Unknown · Clansphere Cms

Name of the Vulnerable Software and Affected Versions: Clansphere CMS version 2011.4 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username parameter. Recommendations: For Clansphere CMS version...

Canteen Management 1.0 2022 SQL Injection Vulnerability

Title: Canteen-Management1.0-2022 SQLi Author: nu11secur1ty Vendor: https://www.mayurik.com/ Software: https://github.com/nu11secur1ty/CVE-nu11secur1ty/blob/main/vendors/mayurik/2022/Canteen-Management/Docs/youthappam.zip?raw=true Reference:...

Rdiffweb Username Denial of Service Vulnerability

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A denial of service vulnerability exists in Rdiffweb versions prior to 2.4.8, which stems from a lack of length validation of the...

PT-2022-4941 · Sourcecodester · Sourcecodester Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System affected versions not specified Description: The issue is related to insufficient cleaning of special elements when handling the username parameter in the router.php component of the POST Paramet...

CVE-2022-38637

Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page...

Hospital Management System SQL注入漏洞

The Hospital Management System HMS is a computer system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A SQL injection vulnerability exists in Hospital Management System v1.0, which originates from a security issue with the Username and...

CVE-2022-38637: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page...

CVE-2022-36259

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc...

SACCO 2022 SQL injection Vulnerability

Title: SACCO-2022 SQLi Author: nu11secur1ty Vendor: https://www.mayurik.com/ Software: https://github.com/nu11secur1ty/CVE-nu11secur1ty/blob/main/vendors/mayurik/2022/SACCO/docs/saccoshield.zip?raw=true Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/mayurik/2022/SAC...

Online Driving School SQL注入漏洞

Online Driving School is an online driving school program by the individual developers at Codeprojects. Online Driving School suffers from a SQL injection vulnerability that originates in an unknown section of login.php, where manipulation of the parameters username and password can result in a s...

CVE-2022-37149

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter...

CVE-2022-37149

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter...

CVE-2022-37149

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter...

CVE-2022-37149

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter...

Wavlink WL-WN575A3 操作系统命令注入漏洞

WAVLINK WL-WN575A3 is a wireless network signal extender from China RuiYin Technology WAVLINK. An operating system command injection vulnerability exists in the Wavlink WL-WN575A3 RPT75A3.V4300.201217 version, which stems from a command injection vulnerability found when manipulating the adm.cgi...

PT-2022-23839 · Wavlink · Wavlink Wl-Wn575A3

Name of the Vulnerable Software and Affected Versions: WAVLINK WL-WN575A3 version RPT75A3.V4300.201217 Description: A command injection issue was found in the adm.cgi file, allowing attackers to execute arbitrary commands via the username parameter. Recommendations: For WAVLINK WL-WN575A3 version...

TOTOLINK A720R Command Injection Vulnerability (CNVD-2025-29723)

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK with dual-band Wi-Fi capabilities, focusing on high-speed internet and signal coverage. The TOTOLINK A720R suffers from a command injection vulnerability that originates from a command injection issue with the username...