139 matches found
ABO.CMS-Login-SQLi-CVE-2024-25227
ABO.CMS-Login-SQLi-CVE-2024-25227 SQLi sin autenticación y Bypass de inicio de sesión CVE-2024-25227 Fecha: 23/02/2024 Probado en ABO.CMS 5.8 Vendedor: ABO.CMS URL del vendedor:https://abocms.ru ABO.CMS 5.8 es vulnerable a inyección SQL a través del parámetro tblogin, página de inicio de sesión d...
CVE-2026-19343
A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...
CVE-2024-33288
Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page...
CVE-2024-33288: Improper Neutralization of Special Elements used in an SQL Command
Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page...
CVE-2018-14027
Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...
BiggiDroid Simple PHP CMS SQL注入漏洞
BiggiDroid Simple PHP CMS is a content management system from BiggiDroid open source. A SQL injection vulnerability exists in BiggiDroid Simple PHP CMS version 1.0, which stems from incorrect manipulation of the parameter Username in the file /admin/login.php, which can lead to SQL injection...
PT-2025-47170
Name of the Vulnerable Software and Affected Versions kashipara School Management System version 1.0 Description The software is susceptible to Cross Site Scripting XSS. The issue affects the /adminLogin.php endpoint, specifically through the formuser and formpassword parameters. Successful...
CVE-2025-12132: Cross-Site Request Forgery (CSRF)
The WP Custom Admin Login Page Logo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.8.4. This is due to missing or incorrect nonce validation on the wpclplsave functionality. This makes it possible for unauthenticated attackers to modify...
CVE-2025-12547
A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely...
CVE-2025-12547
A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely...
CVE-2025-12547 LogicalDOC Community Edition Admin Login login.jsp excessive authentication
A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely...
CVE-2025-12547: Improper Restriction of Excessive Authentication Attempts
A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely...
PT-2025-41211
Name of the Vulnerable Software and Affected Versions Campcodes Advanced Online Voting Management System version 1.0 Description A flaw exists in Campcodes Advanced Online Voting Management System version 1.0 that could allow for remote code execution. The issue is related to a SQL injection...
EUVD-2021-23940
Malware in sbrugna...
EUVD-2010-3078
Malware in sbrugna...
EUVD-2018-5957
Malware in sbrugna...
EUVD-2025-26273
Malicious code in bioql PyPI...
EUVD-2025-16267
Malicious code in bioql PyPI...