CVE-2020-23148

The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via a crafted POST request...

CVE-2020-23148: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via a crafted POST request...

Cross site scripting

Cross Site Scripting XSS vulnerability in gnuboard5 =v5.3.2.8 via the url parameter to bbs/login.php...

CVE-2020-18661

Cross Site Scripting XSS vulnerability in gnuboard5 =v5.3.2.8 via the url parameter to bbs/login.php...

CVE-2020-18661: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in gnuboard5 =v5.3.2.8 via the url parameter to bbs/login.php...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2021-49143)

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo. The vulnerability can be exploited to conduct cross-site scripting attacks via the gourl parameter in login.php...

CVE-2020-22165

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22165: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

Cross site scripting

Cross Site Scripting XSS vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php...

CVE-2020-21517

Cross Site Scripting XSS vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php...

CVE-2020-21517

MetInfo 7.0.0 is affected by a Cross‑Site Scripting (XSS) vulnerability exploitable via the gourl parameter in login.php. The issue is identified as CVE-2020-21517. Provided sources consistently describe the vulnerable entry as MetInfo’s login flow accepting gourl input that can be manipulated to...

CVE-2020-21517

Cross Site Scripting XSS vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php...

CVE-2020-21517: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php...

PT-2021-10638

Name of the Vulnerable Software and Affected Versions: MetInfo version 7.0.0 Description: A Cross Site Scripting XSS issue exists via the gourl parameter in the "login.php" endpoint. Recommendations: For MetInfo version 7.0.0, update the software to a version that fixes this issue, or as a...

PT-2021-11658

Name of the Vulnerable Software and Affected Versions: SourceCodester Alumni Management System version 1.0 Description: The issue allows a user to inject SQL payload to bypass authentication via the "admin/login.php" endpoint. This can potentially lead to unauthorized access. Recommendations: For...

CVE-2020-29214: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.php...

CVE-2021-31738

Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS...

CVE-2021-31738

Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS...

CVE-2021-31738: Improper Neutralization of Input During Web Page Generation

Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS...

PT-2021-19486

Name of the Vulnerable Software and Affected Versions Adiscon LogAnalyzer versions 4.1.10 through 4.1.11 Description The issue allows for XSS in the login.php file. Recommendations For versions 4.1.10 and 4.1.11, consider disabling access to the login.php file until a fix is available...