13315 matches found
Sql injection
An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter...
in heroiclabs/nakama
Description It is possible to enumerate usernames via the Log-In function. Proof of Concept The login response provides information, whether the username is registered or not in the application. If the user is registered, and wrong password provided, the following information being displayed:...
PT-2022-12632 · Sourcecodester · Employee/Visitor Gate Pass Logging System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Employee and Visitor Gate Pass Logging System version 1.0 Description: An SQL Injection issue exists via the username parameter. Recommendations: For version 1.0, avoid using the username parameter in the affected API endpoint...
Sourcecodester Online Leave Management System SQL注入漏洞
SourceCodester Online Leave Management System is an online leave management system. v1 of SourceCodester Online Leave Management System is vulnerable to SQL injection. system/classes/Login.php parameter lacks effective filtering and escaping, which can be exploited to execute arbitrary SQL comman...
Sourcecodester Employee and Visitor Gate Pass Logging System SQL注入漏洞
SourceCodester Employee and Visitor Gate Pass Logging System is a simple web-based employee and visitor pass logging system that provides companies with an automated platform to track or log the daily records of employees and visitors entering a company building or premises. A SQL injection...
USN-5244-1 dbus vulnerability
Daniel Onaca discovered that DBus contained a use-after-free vulnerability, caused by the incorrect handling of usernames sharing the same UID. An attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service...
CVE-2021-44092
An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...
CVE-2021-44244
An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...
CVE-2021-44092
An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...
CVE-2021-44245
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...
CVE-2021-44245
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...
CVE-2021-44245
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...
Sql injection
An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...
Sql injection
An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...
CVE-2021-44245
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...
CVE-2021-44244
An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...
code-projects Pharmacy Management SQL注入漏洞
code-projects Pharmacy Management is a pharmacy management system. A SQL injection vulnerability exists in code-projects Pharmacy Management because the username parameter in the product administrator login form does not effectively filter special characters in the input data. The vulnerability c...
PT-2022-11983 · Code Projects · Code-Projects Pharmacy Management
Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management version 1.0 Description: An SQL Injection issue exists via the username parameter in the administer login form. This allows for potential exploitation. Recommendations: For code-projects Pharmacy Management...
Sourcecodester Logistic Hub Parcel Management System SQL注入漏洞
Sourcecodester Logistic Hub Parcel Management System is a simple web-based application project whose main purpose is to provide an automated platform for logistics centers to manage and track parcel records. A SQL injection vulnerability exists in Sourcecodester Logistic Hub Parcel Management...
DEBIAN-CVE-2021-23225
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "newusername" field during creation of a new user via "Copy" method at useradmin.php...