PT-2020-15651

Name of the Vulnerable Software and Affected Versions Stock Management System version 1.0 Description A SQL injection issue in the login component allows a remote attacker to execute arbitrary SQL commands via the username parameter. Recommendations For Stock Management System version 1.0, avoid...

FreeNAS 11.2 < 11.2-U8, 11.3 < 11.3-U1 DoS Vulnerability

FreeNAS is prone to a denial of service vulnerability in the login component. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

CVE-2019-11559

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

Cross site scripting

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

CVE-2019-11559

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

PT-2019-12379 · Hrworks · Hrworks

Name of the Vulnerable Software and Affected Versions: HRworks version 1.16.1 Description: A reflected Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component. This can be achieved by manipulating the URL to includ...

CVE-2019-11559: Improper Neutralization of Input During Web Page Generation

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

Design/Logic Flaw

A vulnerability exists in Rancher 2.1.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to visit...

CVE-2019-11881

A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to...

CVE-2019-11881

Summary: CVE-2019-11881 affects Rancher server versions prior to 2.2.4, in the login component. The vulnerability arises from tampering with the “errorMsg” parameter, which can display arbitrary content after filtering tags but not special characters, enabling attackers to lure users to phishing ...

CVE-2019-11881

A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to...

PT-2019-12541 · Rancher · Rancher

Name of the Vulnerable Software and Affected Versions: Rancher versions prior to 2.2.4 Rancher version 2.1.4 Description: A vulnerability exists in the login component of Rancher, where the errorMsg parameter can be tampered to display arbitrary content. Although tags are filtered, special...

CVE-2018-2613

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Login. Supported versions that are affected are 7.x, 8.0.x and 8.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus...

Unspecified Vulnerability in Oracle Argus Safety

Oracle Argus Safety is a complete pharmacovigilance software system designed to address the pharmaceutical industry's toughest regulatory challenges. An unspecified vulnerability exists in the Login component of Oracle Argus Safety. An attacker could exploit the vulnerability to compromise...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-02401)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

PT-2018-5215

Name of the Vulnerable Software and Affected Versions Eleix Openhacker version 0.1.47 Description The issue affects the account registration and login component, allowing for SQL injection. This can result in information disclosure and remote code execution. Recommendations For Eleix Openhacker...

CVE-2017-1000444: Improper Neutralization of Special Elements used in an SQL Command

Eleix Openhacker version 0.1.47 is vulnerable to an SQL injection in the account registration and login component resulting in information disclosure and remote code execution...

CVE-2016-0699

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to the Login sub-component...

Oracle iLearning has an unspecified vulnerability (CNVD-2015-00579)

Oracle iLearning is an enterprise-class learning management system Learning Management System, LMS, and is one of the core components of Oracle's E-Business Suite. A security vulnerability exists in the Oracle iLearning login component that could be exploited by remote attackers to compromise...

ASP.NET vulnerable to open redirect

Overview ASP.NET provided by Microsoft contains an open redirect vulnerability due to an issue in the login component. ASP.NET provided by Microsoft contains an open redirect vulnerability due to an issue in the login component. Therefore a web application that implements ASP.NET may be vulnerabl...