3 matches found
CVE-2025-13586: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirmpassword causes sql injection. It is possible to initiate the attack remotely. The exploit has been...
PT-2024-31992
Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A vulnerability was found in the system, affecting the processing of the file /Admin/changepassword.php. The manipulation of the arguments txtold password, txtnew password, and...
CVE-2009-1610: Undefined Security Weakness
admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator password and gain administrator privileges via a direct request...