2713 matches found
CVE-2024-0182
A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ of the component Admin Login. The manipulation of the argument username/password leads to sql injection. The attack may be...
CVE-2025-0846
A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/AdminLogin.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...
PT-2025-4071 · Unknown · 1000 Projects Employee Task Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Employee Task Management System version 1.0 Description: A critical issue affects the /admin/AdminLogin.php file, where the manipulation of the email argument leads to sql injection. This issue can be initiated remotely. The...
CVE-2025-0842
A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unknown processing of the file admin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack may be initiated remotely. The...
CVE-2024-13085
A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...
PT-2024-17929 · Unknown · Phpgurukul Land Record System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Land Record System version 1.0 Description: A critical issue has been found in the PHPGurukul Land Record System, affecting some unknown functionality of the file /admin/login.php. The manipulation of the username argument leads to...
CVE-2024-12969
A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. T...
CVE-2024-12942
A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/adminlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack...
CVE-2024-12942 1000 Projects Portfolio Management System MCA admin_login.php sql injection
A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/adminlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack...
PT-2024-17813 · Unknown · 1000 Projects Portfolio Management System Mca
Name of the Vulnerable Software and Affected Versions: 1000 Projects Portfolio Management System MCA version 1.0 Description: A critical issue has been identified, allowing for SQL injection through the manipulation of the username and password arguments in an unknown function of the file...
Exploit for Cross-Site Request Forgery (CSRF) in Combodo Itop
iTop-CVEs-exploit This repository contains exploits for iTOP C...
CVE-2024-12663 funnyzpc Mee-Admin Login login observable response discrepancy
A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The...
CVE-2024-12663 funnyzpc Mee-Admin Login login observable response discrepancy
A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The...
CVE-2024-12497
A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...
1000 Projects Attendance Tracking Management System 注入漏洞
1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Attendance Tracking Management System version 1.0, which originates from the parameter adminusername in the file...
CVE-2024-12497 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection
A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...
PT-2024-17626 · Unknown · 1000 Projects Attendance Tracking Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Attendance Tracking Management System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /admin/check admin login.php. The manipulation of the admin user nam...
CVE-2024-50823
A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters...
CVE-2024-10969
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/loginprocess.php of the component Login. The manipulation of the argument unm/pwd leads to sql injection. The attack m...
CVE-2024-10969
CVE-2024-10969 is a SQL injection vulnerability affecting the 1000 Projects Bookstore Management System 1.0, located in the Login component at /admin/login_process.php. The issue arises from manipulation of the unm parameter (and related unm/pwd variants) and is exploitable remotely, with the exp...