PT-2024-31962 · Unknown · Modstartcms

Name of the Vulnerable Software and Affected Versions: ModStartCMS version 8.8.0 Description: The issue allows attackers to redirect users to an arbitrary website via a crafted URL, exploiting an open redirect vulnerability in the redirect parameter at the "/admin/login" API endpoint...

CVE-2024-9035

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Admin Login. The manipulation of the argument username/password leads to sql injection. It is possible to...

CVE-2024-9035

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Admin Login. The manipulation of the argument username/password leads to sql injection. It is possible to...

CVE-2024-9035 code-projects Blood Bank Management System Admin Login login.php sql injection

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Admin Login. The manipulation of the argument username/password leads to sql injection. It is possible to...

CVE-2024-9035 code-projects Blood Bank Management System Admin Login login.php sql injection

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Admin Login. The manipulation of the argument username/password leads to sql injection. It is possible to...

CVE-2024-9035

The CVE-2024-9035 entry concerns Code-projects Blood Bank Management System 1.0. The vulnerability exists in the Admin Login component, specifically in /admin/login.php, where manipulating the username and password parameters yields a SQL injection. It is exploitable remotely and the exploit has ...

Code-Projects Blood Bank Management System SQL注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. A SQL injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which originates from a SQL injection vulnerability in the username/password parameters in the...

PT-2024-39379 · Unknown · Code-Projects Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A critical issue was found in the Admin Login component of the system, affecting an unknown part of the file /admin/login.php. The manipulation of the username and password...

PreSchool Enrollment System 1.0 SQL Injection

==================================================================================================================================== | Title : PreSchool Enrollment System 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64...

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

PHPGurukul Job Portal 跨站脚本漏洞

PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A cross-site scripting vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the useremail parameter in /jobportal/admin/login.php...

Sourcecodehero Event Management System 安全漏洞

Sourcecodehero Event Management System is an open source event management system from Sourcecodehero. A security vulnerability exists in Sourcecodehero Event Management System version 1.0, which is caused by SQL injection via the parameter "username" in /event/admin/login.php...

CVE-2024-44727

Sourcecodehero Event Management System 1.0 is vulnerable to an SQL Injection via the username parameter in /event/admin/login.php. Documented across multiple feeds; no patch/version fix details are provided in the supplied materials. Exploitation details, impact, and mitigations beyond the generi...

Loan Management System 2024 1.0 Insecure Settings

============================================================================================================================================= | Title : Loan Management System 2024 v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

Online Musical Instrument Shop IN 1.0 Cross Site Scripting

==================================================================================================================================================== | Title : Online Musical Instrument Shop IN v1.0 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firef...

Cambium EPMP 1000 Account Password Reset

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cambium ePMP 1000 Account Password Reset', 'Description' = % This module exploits an access control vulnerability in Cambium ePMP device manageme...

CVE-2024-41236

A SQL injection vulnerability in /smsa/adminlogin.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System version v3.2.0, which originates from an SQL injection vulnerability in the username parameter of the /smsa/adminlogin.php...

PT-2024-29314 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: A SQL injection vulnerability in the /smsa/admin login.php file allows an attacker to execute arbitrary SQL commands via the username parameter of the Admin Login Page...

CVE-2024-41236

A SQL injection vulnerability in /smsa/adminlogin.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page...