Sql injection

Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php...

CVE-2023-37772

Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php...

CVE-2023-37772

Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php...

CVE-2023-37772

CVE-2023-37772 affects Online Shopping Portal Project v3.1, with a SQL injection vulnerability in the Email parameter of /shopping/login.php. The issue is documented across multiple sources (NVD, Red Hat, CVE lists, PT-Security) as a SQL injection in the login endpoint, indicating the root cause ...

Online Shopping Portal SQL注入漏洞

Online Shopping Portal is an open source online shopping portal from the individual developer Anuj Kumar. A security vulnerability exists in Online Shopping Portal Project version 3.1, which stems from a SQL injection vulnerability in the parameter Email...

CVE-2023-36256

The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery CSRF attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin's consent. The email of the user to be deleted is...

CVE-2023-3534

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file checkavailability.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

SourceCodester Shopping Website SQL注入漏洞

SourceCodester Shopping Website is a shopping website type CMS. A SQL injection vulnerability exists in SourceCodester Shopping Website version 1.0, which stems from a parameter email in the file checkavailability.php that can lead to sql injection...

PT-2023-25205 · Unknown · Sourcecodester Shopping Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Shopping Website version 1.0 Description: A critical issue has been found, affecting an unknown function of the file check availability.php. The manipulation of the email argument leads to sql injection, allowing for remote...

CVE-2023-34548

Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter...

CVE-2023-34548

Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter...

CVE-2023-34548

Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter...

Sql injection

Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter...

CVE-2023-34548

Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter...

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero Personal Developer. A security vulnerability exists in the Simple Customer Relationship Management CRM System, which stems from an email parameter that could lead to an SQL...

PT-2023-24916 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management version 1.0 Description: The issue allows for SQL Injection via the email parameter. Recommendations: For version 1.0, avoid using the email parameter in affected API endpoints until the issue is...

CVE-2023-34548

Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter...

CVE-2023-34452

Grav is a flat-file content management system. In versions 1.7.42 and prior, the "/forgotpassword" page has a self-reflected cross-site scripting vulnerability that can be exploited by injecting a script into the "email" parameter of the request. While this vulnerability can potentially allow an...

Cross site scripting

Grav is a flat-file content management system. In versions 1.7.42 and prior, the "/forgotpassword" page has a self-reflected cross-site scripting vulnerability that can be exploited by injecting a script into the "email" parameter of the request. While this vulnerability can potentially allow an...

CVE-2023-34452 Grav vulnerable to Self Cross Site Scripting in /forgot_password

Grav is a flat-file content management system. In versions 1.7.42 and prior, the "/forgotpassword" page has a self-reflected cross-site scripting vulnerability that can be exploited by injecting a script into the "email" parameter of the request. While this vulnerability can potentially allow an...