2961 matches found
CVE-2022-27124
Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
CVE-2022-28468
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
CVE-2022-27124
Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
Sql injection
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
CVE-2022-27124
CVE-2022-27124 affects Insurance Management System 1.0, with a SQL injection vulnerability exposed via the username parameter. The root cause is a flaw in input handling that allows a crafted username to manipulate SQL queries. Public documentation lists this vulnerability across multiple feeds (...
CVE-2022-27124
Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
CVE-2022-27124: Improper Neutralization of Special Elements used in an SQL Command
Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
Insurance Management System SQL注入漏洞
Insurance Management System is an insurance management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in Insurance Management System 1.0, which allows an attacker to perform SQL injection via the username parameter...
PT-2022-18233 · Unknown · Insurance Management System
Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter. Recommendations: For Insurance Management System version 1.0, consider...
Payroll Management System SQL注入漏洞
Payroll Management System is a payroll management system by Carlo Montero Personal Developer. A security vulnerability exists in Payroll Management System v1.0, which allows an attacker to perform SQL injection via the username parameter...
CVE-2022-28468: Improper Neutralization of Special Elements used in an SQL Command
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
CVE-2021-43462
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
CVE-2021-43462
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
CVE-2021-43462
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
CVE-2021-43462
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
PT-2022-11849 · Unknown · Rumble Mail Server
Name of the Vulnerable Software and Affected Versions: Rumble Mail Server version 0.51.3135 Description: A Cross Site Scripting XSS issue exists via the username parameter. Recommendations: For Rumble Mail Server version 0.51.3135, consider restricting access to the login functionality until a...
Rumble Mail Server跨站脚本漏洞
Rumble Mail Server is a mail server suite for SMTP ESMTPSA, HTTP, POP3 and IMAP4v1 by Daniel Gruno, a personal developer.A cross-site scripting vulnerability exists in Rumble Mail Server version 0.51.3135, which stems from the username parameter's lack of data validation filtering for user The...
CVE-2021-43462: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57803)
ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and previous versions, which can be exploited by remote attackers to execute HTML or JavaScript code with the help...