1444 matches found
CVE-2024-5093 SourceCodester Best House Rental Management System login.php sql injection
A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The...
House Rental Management System SQL注入漏洞
House Rental Management System is a house rental management system by Carlo Montero, an individual developer. SourceCodester Best House Rental Management System version 1.0 suffers from a SQL injection vulnerability that stems from the username/password parameter in the login.php file...
CVE-2024-4972 code-projects Simple Chat System login.php sql injection
A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2024-4972 code-projects Simple Chat System login.php sql injection
A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2024-4075
A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The...
Online Furniture Shopping Ecommerce Website 跨站脚本漏洞
Online Furniture Shopping Ecommerce Website is an online furniture shopping ecommerce website. A cross-site scripting vulnerability exists in Online Furniture Shopping Ecommerce Website, which is caused by a cross-site scripting vulnerability in the txtAddress parameter of the login.php file...
CVE-2024-31678
Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file...
CVE-2024-31678
Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file...
CVE-2024-31678
CVE-2024-31678 affects Sourcecodester Loan Management System v1.0. The vulnerability is SQL Injection via the password parameter in login.php, with CVSS 3.1/3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL). Public sources confirm the flaw but do not provide concrete expl...
CVE-2024-3534
CVE-2024-3534 affects Campcodes Church Management System 1.0. The issue is a SQL injection in login.php via the password parameter, enabling remote exploitation. Several connected sources confirm a critical risk (network vector, low attack complexity, no privileges required) and that the vulnerab...
CVE-2024-3534 Campcodes Church Management System login.php sql injection
A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The explo...
CVE-2024-3439
A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...
CVE-2024-3439 SourceCodester Prison Management System login.php sql injection
A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...
CVE-2024-3438
CVE-2024-3438 affects SourceCodester Prison Management System 1.0. The vulnerability exists in the /Admin/login.php file, where input handling enables SQL injection. Exploitation is possible remotely, and public disclosure is noted. Multiple connected documents corroborate the issue and describe ...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system developed by Carlo Montero, an individual developer. A SQL injection vulnerability exists in SourceCodester Prison Management System version 1.0, which originates in the /Account/login.php file and can be exploited for SQL injection attacks...
CVE-2024-3431
A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of the file /login.php?m=admin&c=Field&a=channeledit of the component Backend. The manipulation of the argument channelid leads to deserialization. The attack can be initiated...
CVE-2024-3431 EyouCMS Backend deserialization
A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of the file /login.php?m=admin&c=Field&a=channeledit of the component Backend. The manipulation of the argument channelid leads to deserialization. The attack can be initiated...
CVE-2024-28741
Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component...
CVE-2024-3359 SourceCodester Online Library System login.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of the file admin/login.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The explo...
CVE-2024-28741
Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component...