OpenRapid RapidCMS SQL注入漏洞

OpenRapid RapidCMS is an OpenRapid open source CMS system that is fast and easy to use. A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1 and earlier versions, which originates from a SQL injection vulnerability in the username parameter of the /resource/runlogon.php file...

OpenRapid RapidCMS SQL注入漏洞

OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1 and earlier versions, which originates from a SQL injection vulnerability in the username parameter of the /admin/user/user-move-run.php file...

CVE-2024-8301

A vulnerability was found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax/checkin.php. The manipulation of the argument username leads to sql injection. The attack can b...

dingfanzu 安全漏洞

dingfanzu is a php-based takeaway ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu, which is caused by an SQL injection vulnerability in the username parameter of the /ajax/getBasicInfo.php file...

PT-2024-38926 · Unknown · Dingfanzu Cms

Name of the Vulnerable Software and Affected Versions: dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c Description: A critical vulnerability was found in dingfanzu CMS, affecting an unknown functionality of the file /ajax/checkin.php. The manipulation of the username argument leads t...

dingfanzu SQL注入漏洞

dingfanzu is a php-based food ordering website developed by gk2007 individual developer. A SQL injection vulnerability exists in dingfanzu, which is caused by a SQL injection vulnerability in the username parameter of the /ajax/checkin.php file...

dingfanzu CMS SQL注入漏洞

dingfanzu CMS is a php based takeaway food ordering website - food ordering system by dingfanzu individual developer. A SQL injection vulnerability exists in dingfanzu CMS, which originates from a SQL injection vulnerability in the username parameter of the /ajax/chpwd.php file...

CVE-2024-41236

A SQL injection vulnerability in /smsa/adminlogin.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page...

CVE-2024-7745

In WSFTP Server versions before 8.8.8 2022.0.8, a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only...

CVE-2024-7745 Multi-Factor Authentication Bypass in Progress WS_FTP Server

In WSFTP Server versions before 8.8.8 2022.0.8, a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only...

Progress Software Ipswitch WS_FTP Server 安全漏洞

Progress Software Ipswitch WSFTP Server is a suite of FTP server software from Progress Software, Inc. that provides file transfer control, transfer encryption, and other features. A security vulnerability exists in Progress Software Ipswitch WSFTP Server versions prior to 8.8.8. An attacker can...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System version v3.2.0, which originates from an SQL injection vulnerability in the username parameter of the /smsa/adminlogin.php...

The vulnerability of the Portainer container management platform, related to improper user management, allows a hacker to determine whether a user’s name is valid or not.

The vulnerability of the Portainer container management platform is related to the difference in user authentication response time. Exploiting this vulnerability allows a remote attacker to determine whether a user’s name is valid or not...

CVE-2024-44795

A cross-site scripting XSS vulnerability in the component /login/disabled.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

CVE-2024-44795

A cross-site scripting XSS vulnerability in the component /login/disabled.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

Online Bus Reservation Site SQL注入漏洞

Online Bus Reservation Site is an online bus reservation site by Fabian Ros Individual Developer. A SQL injection vulnerability exists in Online Bus Reservation Site version 1.0, which is caused by an SQL injection vulnerability in the Username parameter of the login.php page...

PT-2024-31253

Name of the Vulnerable Software and Affected Versions Gazelle version 63b3370 Description A cross-site scripting XSS issue exists in the /login/disabled.php component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

CVE-2024-44795

Gazelle (commit 63b3370) contains a cross-site scripting (XSS) vulnerability in the /login/disabled.php component, allowing an attacker to inject script/HTML via the username parameter. Affected file/component is clearly identified, with exploitation described as arbitrary web script execution. M...

Malicious code in ttat-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 171a49cab7c7b9f2c358c0e14882706dcd80cde089799698400155ee26240e80 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

Malicious code in byterec-models (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a743bef3c7e21e3a83027eb77a9868e7b659f295c96c82ac735bc135b353e597 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...