PT-2022-28051 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Blood Bank Management System version 1.0 Description: A critical issue affects the processing of the file login.php, where the manipulation of the username and password arguments leads to SQL injection. The attack can be...

CVE-2022-42931

Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username not password was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox 106...

CVE-2022-42931

Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username not password was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox 106...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...

CVE-2022-42931

Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username not password was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox 106...

PT-2022-6548 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.5 Description: The issue is related to a primary weakness in the rdiffweb GitHub repository, allowing for authentication bypass. This weakness is due to the username field not being unique to users, enabling...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3. This issue affects some unknown processing of the file htdocs/templates2/ocstyle/login.tpl of the component Login Page. The manipulation of the argument username leads to cross site...

oc-server3 跨站脚本漏洞

oc-server3 is an open source geography teaching website by Opencaching Deutschland. A security vulnerability exists in Opencaching Deutschland oc-server3 that stems from cross-site scripting due to incorrect manipulation of the parameter username...

PT-2022-27660 · Opencaching Deutschland · Oc-Server3

Name of the Vulnerable Software and Affected Versions: Opencaching Deutschland oc-server3 affected versions not specified Description: A problematic issue has been found in the Login Page component, affecting the processing of the file htdocs/templates2/ocstyle/login.tpl. The manipulation of the...

CVE-2022-4587

Summary of CVE-2022-4587 (Opencaching Deutschland oc-server3) Affected software: Opencaching Deutschland oc-server3, specifically the Login Page component (htdocs/templates2/ocstyle/login.tpl). Vulnerability: Cross-site scripting (XSS) via manipulation of the argument username. The issue may be t...

Online Grading System SQL注入漏洞

Sourcecodester Online Grading System is a student information management system. The system provides functions such as student information management and online grading. A security vulnerability exists in Online Grading System version 1.0, which is caused by a uname parameter that allows remote...

FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...

CVE-2022-40000

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...

CVE-2021-39427

Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php...

CVE-2021-39427

Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php...

Cross site scripting

Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php...

PT-2022-25159 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS version 2.1.1 Description: The issue allows remote attackers to run arbitrary code via the username field of the admin log in page. This is a Cross Site Scripting XSS issue. Recommendations: For FeehiCMS version 2.1.1, as a temporary...

FeehiCMS 跨站脚本漏洞

FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.1.1, which originated from a vulnerability that allows remote attackers to run arbitrary code via the username field of the administrator login page...

CVE-2022-40000

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...

188Jianzhan 跨站脚本漏洞

Liaoning Vtime Technology 188Jianzhan Demon Baba website builder is an open source website builder from China's Liaoning Vtime Technology Liaoning Vtime Technology. A security vulnerability exists in 188Jianzhan version 2.10. An attacker can exploit this vulnerability to execute arbitrary code vi...