CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Identifiants administrateur codés en dur dans i-doit Pro 25 et versions antérieures i-doit Pro 25 et versions antérieures sont vulnérables à une vulnérabilité d'identifiants administrateur codés en dur. Ces vulnérabilités permettent à quiconque de se connecter en tant...

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 SQLi غير مصادق عليه وتجاوز تسجيل الدخول CVE-2024-25227 التاريخ: 23/02/2024 اختبر على ABO.CMS 5.8 البائع: ABO.CMS رابط البائع:https://abocms.ru ABO.CMS 5.8 عرضة لحقن SQL عبر معامل tblogin في صفحة تسجيل الدخول للمسؤول. المكون المتأثر هو معامل "tblogin" في صفحة تسجي...

Breacher

Breacher Un script pour trouver les pages de connexion administrateur et les vulnérabilités EAR. Fonctionnalités Multithreading à la demande Grande liste de chemins 482 chemins Prend en charge les extensions php, asp et html Vérifie les potentielles vulnérabilités EAR Vérifie la présence de...

CVE-2024-10924

استغلال لـ CVE-2024-10924 إضافة Really Simple Security لووردبريس - تجاوز المصادقة 📌 نظرة عامة CVE-2024-10924 هي ثغرة أمنية حرجة لتجاوز المصادقة في إضافة Really Simple Security لنظام ووردبريس الإصدارات 9.0.0 إلى 9.1.1.1. تسمح هذه الثغرة للمهاجمين غير الموثقين بتسجيل الدخول كأي مستخدم بما في ذلك...

Alumni Management System 1.0 - SQL Injection

SourceCodester Alumni Management System 1.0 contains a sqlinjection caused by unsanitized input in admin/login.php, letting attackers bypass authentication, exploit requires injection of malicious SQL payload. id: CVE-2020-29214 info: name: Alumni Management System 1.0 - SQL Injection author:...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — تجاوز مصادقة / تحكم غير صحيح في الوصول في PerfexCRM ملاحظة: الخطوات أعلاه هي خطوات الاكتشاف الأصلية التي أبلغ بها Ajansha Shankar و Ahamed Yaseen. المراجع ورقة OWASP التفصيلية للمصادقة — إرشادات حول التحقق من جانب الخادم وضوابط المصادقة...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Contournement-Critique-de-l-Authentification- CVE-2025-41646 - Contournement critique de l'authentification 🔓 CVE-2025-41646 - PoC de contournement de l'authentification de RevPi WebStatus Une vulnérabilité critique de contournement de l'authentification CVE-2025-41646 dans RevPi...

CVE-2022-40470

CVE-2022-40470 ثغرة برمجية من نوع Cross Site Scripting في نظام إدارة المتبرعين بالدم باستخدام CodeIgniter - 1.0 الوصف المقترح يسمح نظام إدارة المتبرعين بالدم Phpgurukul الإصدار 1.0 بثغرة Cross Site Scripting عبر ميزة إضافة اسم فصيلة الدم. معلومات إضافية الإثبات:...

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

CVE-2026-78246

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

EUVD-2026-64828

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

CVE-2026-78246

A SQL injection vulnerability exists in itsourcecode Online Clinic Management System 1.0 , specifically in the Admin Login component (file success/login.php). The root cause is the unsanitized handling of the Username argument, allowing an unauthenticated remote attacker to inject arbitrary SQL. ...

CVE-2026-78246 itsourcecode Online Clinic Management System Admin Login login.php sql injection

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

PT-2026-80808

Name of the Vulnerable Software and Affected Versions itsourcecode Online Clinic Management System version 1.0 Description An issue in the Admin Login component allows remote exploitation via SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. T...

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - ब्रूटफोर्स बाइपास - CVE-2019-17240 CVE-2019-17240 पर आधारित एक बहुत ही सरल स्क्रिप्ट। मूल POC और स्पष्टीकरण: https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt...

CVE-2026-76764

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

CVE-2026-76764 code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

EUVD-2026-63186

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

CVE-2026-76764

code-projects Employee Management System 1.0 is vulnerable to SQL injection via the mailuid argument in /process/aprocess.php (Admin Login Endpoint). CVSS 7.3 HIGH. Exploit proof-of-concept published; no patch version provided. Exploitation details not available in provided documents.