263 matches found
iboss Secure Web Gateway 跨站脚本漏洞
iboss Secure Web Gateway is a web security solution from iboss designed to help organizations protect their networks from cyber threats and malicious activity. A cross-site scripting vulnerability exists in iboss Secure Web Gateway version 10.1 and earlier, which stems from a cross-site scripting...
NorthStarC2 跨站脚本漏洞
NorthStarC2 is an open source command and control framework by Engin Individual Developers. A cross-site scripting vulnerability exists in NorthStarC2 v1 that originates from allowing remote attackers to execute arbitrary code via the login.php component...
CVE-2024-28741
Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component...
Cross site scripting
Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component...
CVE-2023-48985
Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component...
The vulnerability of the php-scrm/login.php component of the Simple Customer Relationship Management System web application, which allows a hacker to execute arbitrary SQL queries against the database.
The vulnerability of the php-scrm/login.php component in the Simple Customer Relationship Management System web application is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries against the databa...
Sql injection
SQL Injection vulnerability in Employee Management System v.1.0 allows a remote attacker to execute arbitrary SQL commands via the txtusername and txtpassword parameters in the login.php components...
CVE-2023-33758
Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting XSS vulnerability via the CLIENTNAME and DEVICEGUID fields in the login component...
PT-2024-12439 · Splicecom · Splicecom Maximiser Soft Pbx
Name of the Vulnerable Software and Affected Versions: Splicecom Maximiser Soft PBX versions 1.5 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the CLIENT NAME and DEVICE GUID fields in the login component...
The vulnerability of the Login component – SSO of the Oracle Application Object Library – allows a perpetrator to cause a service failure.
The vulnerability of the Login component – SSO in the Oracle Application Object Library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures using the HTTP protocol...
CVE-2024-0736
A vulnerability classified as problematic has been found in EFS Easy File Sharing FTP 3.6. This affects an unknown part of the component Login. The manipulation of the argument password leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to t...
PT-2024-15793 · Unknown · Efs Easy File Sharing Ftp
Name of the Vulnerable Software and Affected Versions: EFS Easy File Sharing FTP version 3.6 Description: A problematic vulnerability has been found in the Login component of the software. The manipulation of the password argument leads to denial of service. This issue can be exploited remotely...
Xlight FTP Security Vulnerability
Xlight FTP is a high performance and easy to use FTP server software from Xlight FTP. It makes file transfer secure and easy to use. A security vulnerability exists in Xlight FTP version 1.1, which stems from a denial of service caused by the parameter user of the component Login...
PT-2024-15794 · Unknown · Xlight Ftp Server
Name of the Vulnerable Software and Affected Versions: Xlightftpd Xlight FTP Server version 1.1 Description: A problematic vulnerability was found in the Login component, where the manipulation of the user argument leads to denial of service. The attack can be initiated remotely. Recommendations:...
PT-2024-15456 · Guangzhou Yingke Electronic Technology · Ncast
Name of the Vulnerable Software and Affected Versions: Guangzhou Yingke Electronic Technology Ncast versions up to 2017 Description: A vulnerability was found in Guangzhou Yingke Electronic Technology Ncast, affecting some unknown functionality of the file /manage/IPSetup.php of the component Gue...
CVE-2023-7127
A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...
Sql injection
A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...
CVE-2023-5794
A vulnerability was found in PHPGurukul Online Railway Catering System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to launch the attack...
PT-2023-32332 · Unknown · Phpgurukul Online Railway Catering System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Railway Catering System version 1.0 Description: A critical issue was found in the Login component of the PHPGurukul Online Railway Catering System. The manipulation of the username argument leads to SQL injection. This issu...