CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Жестко закодированные учетные данные администратора в i-doit Pro 25 и ниже i-doit Pro 25 и ниже уязвимы к уязвимости жестко закодированных учетных данных администратора. Эти уязвимости позволяют любому войти как администратор, используя имя пользователя «admin» и пароль «admin»...

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 Неаутентифицированная SQL-инъекция и обход входа CVE-2024-25227 Дата: 23/02/2024 Протестировано на ABO.CMS 5.8 Поставщик: ABO.CMS URL поставщика:https://abocms.ru ABO.CMS 5.8 уязвим для SQL-инъекции через параметр tblogin на странице входа администратора...

Breacher

Breacher 관리자 로그인 페이지 및 EAR 취약점을 찾는 스크립트입니다. 기능 요청 시 멀티스레딩 큰 경로 목록 482개 경로 php, asp 및 html 확장자 지원 잠재적 EAR 취약점 확인 robots.txt 확인 사용자 정의 경로 지원 사용법 php 확장자를 가진 모든 경로 확인 root@kitploit: python breacher -u example.com --type php 스레드를 사용하여 php 확장자를 가진 모든 경로 확인 root@kitploit: python breacher -u example.com...

CVE-2024-10924

Эксплойт для CVE-2024-10924 WordPress Really Simple Security Plugin - Обход аутентификации 📌 Обзор CVE-2024-10924 — критическая уязвимость обхода аутентификации в плагине Really Simple Security для WordPress версии 9.0.0 – 9.1.1.1. Эта уязвимость позволяет неаутентифицированным злоумышленникам...

Alumni Management System 1.0 - SQL Injection

SourceCodester Alumni Management System 1.0 contains a sqlinjection caused by unsanitized input in admin/login.php, letting attackers bypass authentication, exploit requires injection of malicious SQL payload. id: CVE-2020-29214 info: name: Alumni Management System 1.0 - SQL Injection author:...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — PerfexCRM 3.3.1 미만에서의 인증 우회 / 잘못된 접근 제어 관리자 로그인 요약 취약점 유형: 잘못된 접근 제어 — 인증 우회 영향을 받는 제품: PerfexCRM 참고: 위 단계는 Ajansha Shankar와 Ahamed Yaseen이 보고한 최초 발견 단계입니다. 참고 자료 OWASP 인증 치트 시트 — 서버 측 검증 및 인증 제어에 대한 지침...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Critical-Authentication-Bypass- CVE-2025-41646 - Критический обход аутентификации 🔓 CVE-2025-41646 - RevPi WebStatus Обход аутентификации PoC Критическая уязвимость обхода аутентификации CVE-2025-41646 в RevPi WebStatus ≤ v2.4.5 позволяет злоумышленнику войти в систему как admin...

CVE-2022-40470

CVE-2022-40470 Межсайтовый скриптинг в системе управления донорами крови на CodeIgniter - 1.0 Предлагаемое описание Phpgurukul Blood Donor Management System 1.0 позволяет выполнять межсайтовый скриптинг через функцию добавления названия группы крови. Дополнительная информация PoC:...

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

CVE-2026-78246

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

EUVD-2026-64828

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

CVE-2026-78246

A SQL injection vulnerability exists in itsourcecode Online Clinic Management System 1.0 , specifically in the Admin Login component (file success/login.php). The root cause is the unsanitized handling of the Username argument, allowing an unauthenticated remote attacker to inject arbitrary SQL. ...

CVE-2026-78246 itsourcecode Online Clinic Management System Admin Login login.php sql injection

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

PT-2026-80808

Name of the Vulnerable Software and Affected Versions itsourcecode Online Clinic Management System version 1.0 Description An issue in the Admin Login component allows remote exploitation via SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. T...

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - 暴力破解绕过 - CVE-2019-17240 基于 CVE-2019-17240 的极简脚本。 原始 PoC 与说明：https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p ./passwordsfilelist.txt -l :...

CVE-2026-76764

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

CVE-2026-76764 code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

EUVD-2026-63186

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

CVE-2026-76764

code-projects Employee Management System 1.0 is vulnerable to SQL injection via the mailuid argument in /process/aprocess.php (Admin Login Endpoint). CVSS 7.3 HIGH. Exploit proof-of-concept published; no patch version provided. Exploitation details not available in provided documents.