Employee Management System 1.0 - _txtusername_ and _txtpassword_ SQL Injection (Admin Login)

Exploit Title: Employee Management System 1.0 - txtusername and txtpassword SQL Injection Admin Login Date: 2 Feb 2024 Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16999/employee-management-system.html Version:...

Employee Management System 1.0 SQL Injection

Exploit Title: Employee Management System 1.0 - txtfullname and txtphone SQL Injection Date: 2 Feb 2024 Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16999/employee-management-system.html Version: 1.0 Tested on:...

Employee Management System 1.0 - (txtusername) and (txtpassword) SQL Injection Vulnerability

Exploit Title: Employee Management System 1.0 - txtusername and txtpassword SQL Injection Admin Login Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16999/employee-management-system.html Version: 1.0 Tested on:...

CVE-2024-30865

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edituserlogin.php...

CVE-2024-3085

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the...

CVE-2024-3085 PHPGurukul Emergency Ambulance Hiring Portal Admin Login Page login.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the...

CVE-2024-3085 PHPGurukul Emergency Ambulance Hiring Portal Admin Login Page login.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the...

CVE-2024-3085

CVE-2024-3085 affects PHPGurukul Emergency Ambulance Hiring Portal 1.0, specifically the Admin Login Page’s /admin/login.php. The vulnerability is a SQL injection in the username parameter of the login function, enabling remote exploitation and data theft. Multiple sources confirm the attack surf...

PT-2024-23632 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/login.php of the component Admin Login Page. The manipulation of the username argumen...

CVE-2024-3085: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the...

PHPGurukul Emergency Ambulance Hiring Portal SQL注入漏洞

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that arises from a lack of validation of an externally-entered SQL statement in the username parameter of the file /admin/login.php of the...

Salon Booking System < 9.6.3 - Unauthenticated Stored XSS

Description The plugin does not properly sanitize and escape the 'Mobile Phone' field when booking an appointment, allowing customers to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Customers' page and the malicious script is executed in the...

CVE-2024-2673

A vulnerability classified as critical has been found in Campcodes Online Job Finder System 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

Campcodes Online Job Finder System Security Vulnerability

Campcodes Online Job Finder System is an online job finder system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which results from an SQL injection vulnerability in the useremail parameter of the /admin/login.php file...

CVE-2024-2647

A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /admin/singlelogin.php. The manipulation of the argument loginId leads to sql injection. The attack may be initiated...

PT-2024-21492 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A critical issue has been discovered, affecting the /admin/login.php file. The manipulation of the user email argument leads to SQL injection. This issue can be exploited remotely...

CVE-2022-47036

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, it is fixed in newer hardware,...

CVE-2024-25227: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via the tblogin parameter in admin login page...

ABO.CMS Security Vulnerabilities

ABO.CMS is a content management platform. A security vulnerability exists in ABO.CMS version 5.8, which stems from the presence of a SQL injection vulnerability that allows remote attackers to execute arbitrary code, cause a denial of service DoS, elevate privileges, and gain access to sensitive...

CVE-2024-23244

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4. An app from a standard user account may be able to escalate privilege after admin user login...