Lucene search
+L

13315 matches found

Prion
Prion
•added 2022/01/21 5:15 p.m.•24 views

Sql injection

An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter...

10CVSS9.8AI score0.01556EPSS
SaveExploits1References1Affected Software1
Huntr
Huntr
•added 2022/01/21 9:57 a.m.•23 views

in heroiclabs/nakama

Description It is possible to enumerate usernames via the Log-In function. Proof of Concept The login response provides information, whether the username is registered or not in the application. If the user is registered, and wrong password provided, the following information being displayed:...

2.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/01/21 12:00 a.m.•65 views

PT-2022-12632 · Sourcecodester · Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Employee and Visitor Gate Pass Logging System version 1.0 Description: An SQL Injection issue exists via the username parameter. Recommendations: For version 1.0, avoid using the username parameter in the affected API endpoint...

10CVSS9.9AI score0.01556EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/01/21 12:00 a.m.•14 views

Sourcecodester Online Leave Management System SQL注入漏洞

SourceCodester Online Leave Management System is an online leave management system. v1 of SourceCodester Online Leave Management System is vulnerable to SQL injection. system/classes/Login.php parameter lacks effective filtering and escaping, which can be exploited to execute arbitrary SQL comman...

9.8CVSS6.2AI score0.01356EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/01/21 12:00 a.m.•16 views

Sourcecodester Employee and Visitor Gate Pass Logging System SQL注入漏洞

SourceCodester Employee and Visitor Gate Pass Logging System is a simple web-based employee and visitor pass logging system that provides companies with an automated platform to track or log the daily records of employees and visitors entering a company building or premises. A SQL injection...

10CVSS6AI score0.01556EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/20 7:51 p.m.•18 views

USN-5244-1 dbus vulnerability

Daniel Onaca discovered that DBus contained a use-after-free vulnerability, caused by the incorrect handling of usernames sharing the same UID. An attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service...

7.8CVSS7.1AI score0.00331EPSS
SaveExploits0References2
OSV
OSV
•added 2022/01/20 7:15 p.m.•12 views

CVE-2021-44092

An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...

9.8CVSS5.8AI score0.01254EPSS
SaveExploits1References1
OSV
OSV
•added 2022/01/20 7:15 p.m.•13 views

CVE-2021-44244

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

9.8CVSS5.8AI score0.01254EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/20 7:15 p.m.•7 views

CVE-2021-44092

An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...

9.8CVSS7.4AI score0.01254EPSS
SaveExploits1References2
NVD
NVD
•added 2022/01/20 7:15 p.m.•38 views

CVE-2021-44245

An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...

9.8CVSS0.01444EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/20 7:15 p.m.•9 views

CVE-2021-44245

An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...

9.8CVSS7.4AI score0.01444EPSS
SaveExploits1References3
OSV
OSV
•added 2022/01/20 7:15 p.m.•10 views

CVE-2021-44245

An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...

9.8CVSS5.8AI score0.01444EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/20 7:15 p.m.•17 views

Sql injection

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

7.5CVSS9.8AI score0.01254EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/01/20 7:15 p.m.•23 views

Sql injection

An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...

7.5CVSS9.8AI score0.01254EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/01/20 6:38 p.m.•44 views

CVE-2021-44245

An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...

10AI score0.01444EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/01/20 6:12 p.m.•35 views

CVE-2021-44244

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

10AI score0.01254EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/01/20 12:00 a.m.•12 views

code-projects Pharmacy Management SQL注入漏洞

code-projects Pharmacy Management is a pharmacy management system. A SQL injection vulnerability exists in code-projects Pharmacy Management because the username parameter in the product administrator login form does not effectively filter special characters in the input data. The vulnerability c...

9.8CVSS8.6AI score0.01254EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•15 views

PT-2022-11983 · Code Projects · Code-Projects Pharmacy Management

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management version 1.0 Description: An SQL Injection issue exists via the username parameter in the administer login form. This allows for potential exploitation. Recommendations: For code-projects Pharmacy Management...

9.8CVSS9.8AI score0.01254EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/01/20 12:00 a.m.•9 views

Sourcecodester Logistic Hub Parcel Management System SQL注入漏洞

Sourcecodester Logistic Hub Parcel Management System is a simple web-based application project whose main purpose is to provide an automated platform for logistics centers to manage and track parcel records. A SQL injection vulnerability exists in Sourcecodester Logistic Hub Parcel Management...

9.8CVSS8.6AI score0.01254EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/19 9:15 p.m.•5 views

DEBIAN-CVE-2021-23225

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "newusername" field during creation of a new user via "Copy" method at useradmin.php...

5.4CVSS6.9AI score0.00532EPSS
SaveExploits0References1
Rows per page
Query Builder