1740 matches found
CodeAstro Internet Banking System SQL Injection Vulnerability
CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A security vulnerability exists in CodeAstro Internet Banking System version 1.0, which originates from a SQL injection vulnerability in the parameter email of the file pagesresetpwd.php...
PT-2023-32268 · Unknown · Codeastro Internet Banking System
Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A cross-site scripting issue was found in the CodeAstro Internet Banking System, affecting an unknown functionality of the file pages reset pwd.php. The manipulation of the email...
CVE-2023-5373
A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2023-5271
A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file editparcel.php. The manipulation of the argument email leads to sql injection. The exploit has been disclosed to the publ...
SourceCodester Best Courier Management System SQL Injection Vulnerability
Best Courier Management System is a courier management system by Mayuri K. Individual developer. SourceCodester Best Courier Management System version 1.0 suffers from a SQL injection vulnerability that stems from a parameter email in the file editparcel.php that can lead to sql injection...
PT-2023-31992 · Sourcecodester · Sourcecodester Best Courier Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A critical issue affects some unknown functionality of the file edit parcel.php. The manipulation of the email argument leads to sql injection. The exploit has been...
CVE-2023-44164
The 'Email' parameter of the processlogin.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-44164
The 'Email' parameter of the processlogin.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-44164
CVE-2023-44164 involves the Email parameter of process_login.php in Online Movie Ticket Booking System v1.0. The input is not validated and is sent unfiltered to the database, described as an unauthenticated SQL injection risk in multiple sources. Affected product details indicate Projectworlds O...
CVE-2023-44164 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
The 'Email' parameter of the processlogin.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-43013
Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control...
CVE-2023-43013: Improper Neutralization of Special Elements used in an SQL Command
Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control...
CVE-2023-44164: Improper Neutralization of Special Elements used in an SQL Command
The 'Email' parameter of the processlogin.php resource does not validate the characters received and they are sent unfiltered to the database...
PT-2023-29134 · Online Movie Ticket Booking System +1 · Online Movie Ticket Booking System
Name of the Vulnerable Software and Affected Versions: process login.php affected versions not specified Description: The issue is related to the 'Email' parameter of the process login.php resource, which does not validate the characters received, sending them unfiltered to the database...
Remote code execution
Cuppa CMS v1.0 was discovered to contain a remote code execution RCE vulnerability via the emailoutgoing parameter at /Configuration.php. This vulnerability is triggered via a crafted payload...
Hospital Management System SQL注入漏洞
The Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. An SQL injection vulnerability exists in Free Hospital Management System for Small Practices version 1.0, which stems from the fac...
CVE-2023-4219
A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument useremail leads to sql injection. The attack can be launched remotely. T...
Jenkins plugins Multiple Vulnerabilities (2022-06-30)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of webhook-triggered builds, resulti...