12585 matches found
CampCodes Online Food Ordering System 注入漏洞
CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which is caused by a SQL injection due to an incorrect manipulation of the parameter Username in the file...
SourceCodester Online Student Clearance System 代码注入漏洞
SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A code injection vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which originates from cross-site scripting due to a parameter Username operation in...
Online Class and Exam Scheduling System profile_update.php File SQL Injection Vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that originates from a lack of validation of the parameter username in the file /Scheduling/pages/profileupdate.php against...
Ensure That Passwords Do Not Contain User Names
To ensure user security, you must configure passwords that do not contain user names. If a password is the same as the user name or the user name in reverse order, or contains the user name, attackers can guess the password easily. This requirement is not exerted on passwords of users whose names...
CVE-2025-45491
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter...
CVE-2025-45491
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter...
CVE-2025-40622
SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘username’...
PT-2025-19967 · Linksys · Linksys E5600
Name of the Vulnerable Software and Affected Versions: Linksys E5600 version 1.1.0.26 Description: A command injection issue was discovered in the runtime.ddnsStatus DynDNS function, specifically via the username parameter. This allows for potential exploitation. Recommendations: For Linksys E560...
CVE-2025-45491
CVE-2025-45491 affects Linksys E5600 v1.1.0.26. The vulnerability is a command-injection in the runtime.ddnsStatus DynDNS function via the username parameter, enabling network-exploitable code execution with high impact (C/H, I/H, A/H) per CVSS 3.1 data. Multiple sources (NVD/Red Hat and OpenVAS ...
Tcman Gim SQL注入漏洞
Tcman Gim is a facility management software from the Spanish company Tcman designed for use on mobile devices. An SQL injection vulnerability exists in Tcman Gim v11, which stems from an SQL injection in the GetLastDatePasswordChange endpoint username parameter...
CVE-2025-45491
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter...
The vulnerability of TP-Link M7450 router’s microprogramming software lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of TP-Link M7450 router’s microprogramming software is related to the lack of measures taken to protect the SQL query structure during the processing of the username and password fields. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary cod...
CVE-2025-4283
A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely...
MRCMS 代码注入漏洞
MRCMS is a content management system by marker personal developer. A code injection vulnerability exists in MRCMS version 3.1.3, which originates from a cross-site scripting attack due to an incorrect manipulation of the parameter Username in the file /admin/user/edit.do...
SourceCodester Stock Management System 注入漏洞
SourceCodester Stock Management System is a SourceCodester open source inventory management system. An injection vulnerability exists in SourceCodester Stock Management System version 1.0, which stems from improper handling of the parameter Username in the file /classes/Login.php, which can lead ...
CVE-2025-4174
A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely...
CVE-2025-3517
Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM user to elevate a previously configured user configured in a PAM JIT account via failure to update the internal account’s SID when updating the username...
PHPGurukul COVID19 Testing Management System 安全漏洞
The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter Username in the file /login.php resulting in SQL injection. No details ...