Sql injection

Lead Management System v1.0 is vulnerable to SQL Injection via the userid parameter in changePassword.php...

PT-2023-15494 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead Management System version 1.0 Description: The issue concerns SQL Injection via the user id parameter in the changePassword.php file. This allows for potential unauthorized access and manipulation of data. Recommendations: For Lead...

CVE-2022-47859

Lead Management System v1.0 is vulnerable to SQL Injection via the userid parameter in changePassword.php...

CVE-2022-47859

Lead Management System v1.0 is affected by a SQL Injection in the user_id parameter of changePassword.php. The CVE description and multiple connected records consistently identify the root cause as unsanitized/validated input in changePassword.php, enabling arbitrary SQL execution with high impac...

CVE-2022-47859: Improper Neutralization of Special Elements used in an SQL Command

Lead Management System v1.0 is vulnerable to SQL Injection via the userid parameter in changePassword.php...

CVE-2022-45221

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in changepassword.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtnewpassword parameter...

Cross site scripting

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in changepassword.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtnewpassword parameter...

Web-Based Student Clearance System 跨站脚本漏洞

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A security vulnerability exists in Web-Based Student Clearance System version v1.0, which was discovered to contain a cross-site scripting XSS vulnerability via changepassword.php...

CVE-2022-45221

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in changepassword.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtnewpassword parameter...

CVE-2022-45221: Improper Neutralization of Input During Web Page Generation

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in changepassword.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtnewpassword parameter...

PT-2022-9718

Name of the Vulnerable Software and Affected Versions Cacti versions affected versions not specified Description The issue allows an unauthenticated remote user to execute a JavaScript payload by visiting a specific URL. This is achieved by injecting the payload into the ref URL parameter in the...

CVE-2012-4393

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use 1 addBookmark.php, 2 delBookmark.php, or 3 editBookmark.php in bookmarks/ajax/; 4 calendar/delete.php, 5 calendar/edit.php...

CVE-2009-1610: Undefined Security Weakness

admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator password and gain administrator privileges via a direct request...

CVE-2008-4427

changepassword.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords...

CVE-2008-4427

CVE-2008-4427 affects Phlatline’s Personal Information Manager (pPIM) up to version 1.0. The vulnerability is that changepassword.php does not require administrative authentication, enabling remote attackers to change arbitrary user passwords. This is the explicitly described impact in the CVE en...

CVE-2008-4427

changepassword.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords...

CVE-2008-4427: Improper Authentication

changepassword.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords...