1444 matches found
CVE-2025-0207 code-projects Online Shoe Store login.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. Th...
CVE-2024-12964 1000 Projects Daily College Class Work Report Book login.php sql injection
A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...
CVE-2024-12964 1000 Projects Daily College Class Work Report Book login.php sql injection
A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...
CVE-2024-12964
CVE-2024-12964 affects the open-source project 1000 Projects Daily College Class Work Report Book (version 1.0). The vulnerability stems from a flaw in the code path handling the user parameter in /login.php , enabling SQL injection . Reports indicate the issue is exploitable remotely and that th...
PT-2024-17835 · Unknown · 1000 Projects Daily College Class Work Report Book
Name of the Vulnerable Software and Affected Versions: 1000 Projects Daily College Class Work Report Book version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /login.php. The manipulation of the user argument leads to SQL injection. It is possible to...
CVE-2024-12884 Codezips E-Commerce Website login.php sql injection
A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2024-12884
CVE-2024-12884 affects Codezips E-Commerce Website 1.0. The vulnerability is an SQL injection in the login.php function triggered by manipulating the email parameter, allowing remote exploitation. Multiple connected sources corroborate the issue and describe it as critical, with exploitation disc...
CVE-2024-12884 Codezips E-Commerce Website login.php sql injection
A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2024-53480
Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in login.php via the emailcont parameter...
PT-2024-35757 · Phpgurukul · Phpgurukul Beauty Parlour Management System
Name of the Vulnerable Software and Affected Versions: Phpgurukul's Beauty Parlour Management System version 1.1 Description: The issue concerns SQL Injection in the login.php file through the emailcont parameter. This allows for potential exploitation by injecting malicious SQL code...
CVE-2024-53480
Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in login.php via the emailcont parameter. Root cause: unsafely concatenated SQL in login flow with insufficient input validation. Impact: high on confidentiality, integrity, and availability (CVSS v3.1 base score 9....
CVE-2024-11962
A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...
CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection
A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...
CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection
A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...
Code-Projects Simple Car Rental System 注入漏洞
Code-Projects Simple Car Rental System is a Code-Projects open source car rental software. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter uname in the file /login.php that causes SQL injection...
CVE-2024-11256
CVE-2024-11256 details (NORMAL) : Affects 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is a SQL injection in the login.php flow caused by unsafely handling the username parameter, enabling remote abuse. Descriptions consistently classify this as critical with potential rem...
PT-2024-34431 · Unknown · Kashipara E-Learning Management System Project
Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /login.php file of the KASHIPARA E-learning Management System Project. The issue is related to the username and password parameters...
CVE-2024-11099
CVE-2024-11099 affects code-projects Job Recruitment 1.0, exploiting an SQL injection in the /login.php page via the email parameter. The vulnerability is reported as remote and has been disclosed publicly. Multiple connected documents confirm the issue and point to a code path involving user inp...
PT-2024-16760 · Unknown · Code-Projects Job Recruitment
Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment versions prior to the latest release Description: A critical issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to SQL injection. The attack may be initiate...
CVE-2024-51213
Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...