2961 matches found
GHSA-RVF8-C35M-8289 Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...
Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...
CVE-2021-34111
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...
CVE-2021-34111
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...
CVE-2021-34111
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...
CVE-2021-34111: Improper Neutralization of Special Elements used in an OS Command
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...
CVE-2022-29009
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication...
Directory Management System SQL注入漏洞
Directory Management System is a directory management system. SQL injection vulnerability exists in Directory Management System version 1.0, which stems from multiple SQL injection vulnerabilities in the username and password parameters in the administration panel. An attacker could use this...
CVE-2022-28110
Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page...
CVE-2022-28110
Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page...
CVE-2022-28110
CVE-2022-28110 : Hotel Management System v1.0 is vulnerable to a SQL injection via the username parameter on the login page. The issue allows injected SQL to affect data confidentiality, integrity, and availability (CVSSv3.1 base score 9.8, CRITICAL). Exploitation status or in‑the‑wild details ar...
CVE-2022-28110: Improper Neutralization of Special Elements used in an SQL Command
Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page...
Hotel Management System SQL注入漏洞
Hotel Management System is a MIS project based on a hotel management system. v1.0 of Hotel Management System is vulnerable to SQL injection, which stems from a login page whose username parameter was found to contain SQL injection. An attacker could exploit the vulnerability to perform SQL...
PT-2022-18816
Name of the Vulnerable Software and Affected Versions Hotel Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the login page. Recommendations For Hotel Management System version 1.0, a...
Delta Controls enteliTOUCH 3.40.3935 Cross Site Scripting Vulnerability
enteliTouch XSS alertdocument.cookie" / input type="hidden" n...
Delta Controls enteliTOUCH 3.40.3935 Cross Site Scripting
enteliTouch XSS alertdocument.cookie" /...
CVE-2022-28363
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/loginprocess username parameter via GET. No authentication is required...
CVE-2022-28363: Improper Neutralization of Input During Web Page Generation
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/loginprocess username parameter via GET. No authentication is required...
Rumble Mail Server Cross-Site Scripting Vulnerability
Rumble Mail Server is a mail server suite for SMTP ESMTPSA, HTTP, POP3 and IMAP4v1 by Daniel Gruno, a personal developer.A cross-site scripting vulnerability exists in Rumble Mail Server version 0.51.3135, which stems from the username parameter's lack of data validation filtering for user The...