2747 matches found
CVE-2022-4739
CVE-2022-4739 affects SourceCodester School Dormitory Management System v1.0, specifically the Admin Login component. The vulnerability enables SQL injection via an unknown function in Admin Login, with remote exploitation implied. Several connected sources corroborate a critical risk with impact...
PT-2022-28054 · Sourcecodester · School Dormitory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester School Dormitory Management System version 1.0 Description: A critical vulnerability was found in the Admin Login component, which leads to sql injection. The attack can be launched remotely. The manipulation affects an unknown...
School Dormitory Management System SQL注入漏洞
School Dormitory Management System is a school dormitory management system. A SQL injection vulnerability exists in School Dormitory Management System version 1.0, which stems from an unknown function in its Admin Login component that allows an attacker to perform SQL injection...
CVE-2022-4726 SourceCodester Sanitization Management System Admin Login sql injection
A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Admin Login. The manipulation of the argument username/password leads to sql injection. The attack can be launched...
PT-2022-28040 · Unknown · Sourcecodester Sanitization Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Sanitization Management System version 1.0 Description: A critical vulnerability was found in the Admin Login component, where the manipulation of the username and password arguments leads to SQL injection. The attack can be...
CVE-2022-4726 SourceCodester Sanitization Management System Admin Login sql injection
A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Admin Login. The manipulation of the argument username/password leads to sql injection. The attack can be launched...
Stored XSS bypass the protection rules
Description Hi there, Someone submitted an xss vulnerability about your project before.And please see "https://huntr.dev/bounties/f353adfb-e5b8-43e7-957a-894670fd4ccd/" for details.You submitted a fix in 7.0.0.2 with commit 4565d8.But after my tests, I found that it was still unsafe. The followin...
CVE-2022-40000
Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...
PT-2022-25159 · Feehicms · Feehicms
Name of the Vulnerable Software and Affected Versions: FeehiCMS version 2.1.1 Description: The issue allows remote attackers to run arbitrary code via the username field of the admin log in page. This is a Cross Site Scripting XSS issue. Recommendations: For FeehiCMS version 2.1.1, as a temporary...
CVE-2022-40000
Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...
CVE-2022-40000
Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...
Ricoh IPSiO SP 4210 跨站脚本漏洞
The Ricoh IPSiO SP 4210 is a laser printer from Ricoh Japan. A security vulnerability exists in the Ricoh IPSiO SP 4210, which can be exploited by an attacker to execute arbitrary scripts on the web browser of a user who logs into the product with administrative privileges...
PT-2022-24989 · Unknown · Pingkon Hms-Php
Name of the Vulnerable Software and Affected Versions: Pingkon HMS-PHP affected versions not specified Description: A critical issue affects the processing of the file admin/adminlogin.php, where the manipulation of the uname/pass argument leads to sql injection. The attack can be initiated...
HMS-PHP 安全漏洞
HMS-PHP is a CSE309 IUB final web application project by the individual developer Pingkon Augustine Rozario. A security vulnerability exists in HMS-PHP that stems from some unknown processing in the file admin/adminlogin.php being affected, where manipulation of the parameter uname/pass can lead ...
PT-2022-6348 · Dell Emc · Dell Emc Scg Policy Manager
Name of the Vulnerable Software and Affected Versions: Dell EMC SCG Policy Manager versions 5.10 through 5.12 Description: The issue is related to a Hard-coded Cryptographic Key, which could allow an attacker with knowledge of the hard-coded sensitive information to potentially exploit this...
CVE-2022-41541
TP-Link AX10v1 V1211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user...
CVE-2022-41541
TP-Link AX10v1 V1211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user...
Authentication flaw
TP-Link AX10v1 V1211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user...
CVE-2022-41541
TP-Link AX10v1 (firmware V1_211117) is vulnerable to a replay attack where an attacker reuses a previously encrypted authentication message and valid token, enabling login to the web admin interface. The available sources confirm the authentication flaw and admin access possibility; no explicit e...