EUVD-2026-5791

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /checkuser.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely...

CVE-2026-2158 code-projects Student Web Portal check_user.php sql injection

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /checkuser.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely...

CVE-2026-2158

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /checkuser.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely...

CVE-2026-2158: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /checkuser.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely...

CVE-2014-9145: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

LightBlog <= 9.9.2 (register.php) Remote Code Execution Exploit

No description provided by source. ? / --------------------------------------------------------------- LightBlog = 9.9.2 register.php Remote Code Execution Exploit --------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

CVE-2008-6177: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in LightBlog 9.8, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 username parameter to viewmember.php, 2 usernamepost parameter to login.php, and the 3 Lightblogusername...

LightBlog 9.8 (GET POST COOKIE) Multiple LFI Vulnerabilities

No description provided by source. LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was...

LightBlog 9.8 - GET POST COOKIE Local File Inclusion

LightBlog 9.8 - GET POST COOKIE Local File Inclusion LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team -...

LightBlog 9.8 - 'GET' / 'POST' / 'COOKIE' Local File Inclusion

LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it...

CVE-2008-4524: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Check User" feature includes/checkuser.php in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

AdaptCMS Lite 1.3 - Blind SQL Injection

AdaptCMS Lite 1.3 - Blind SQL Injection !/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@char...