CVE-2020-9495

CVE-2020-9495 PoC CVE-2020-9495 是 Apache Archiva 2.2.5 之前版本中的一个中等严重程度的 LDAP 注入漏洞。它允许攻击者检索 LDAP 服务器上存在的用户的任何 LDAP 属性值。 来自 Apache Archiva 官方公告： 通过向 Archiva 登录表单提供特殊值，攻击者能够从连接的 LDAP 服务器检索用户属性数据。通过使用特定字符，可以修改用于查询连接 LDAP 服务器上用户的 LDAP 过滤器。通过测量响应时间，可以从 LDAP 用户对象中检索任意属性数据。 PoC poc.py 脚本演示了未经授权的攻击者如何枚举与...

CVE-2023-26469-Jorani

CVE-2023-26469 漏洞利用工具 概述 这是一个针对 Jorani 1.0.0 版本的漏洞利用工具（PoC），该漏洞允许攻击者通过路径遍历和日志注入技术实现远程代码执行。 ⚠️ 警告：此工具仅用于安全研究和授权测试。未经授权使用此工具进行攻击是非法的。 漏洞描述 CVE-2023-26469 是 Jorani 1.0.0 中的一个严重安全漏洞，结合了以下两个攻击向量： 1. 日志注入 ：通过登录表单向应用程序日志文件注入恶意 PHP 代码 2. 路径遍历 ：利用路径遍历漏洞访问并执行被注入的日志文件 攻击者可以利用这个漏洞在目标服务器上执行任意系统命令。 功能特性 自动获取...

moodle-login-csrf

此仓库包含用于发现和利用两个Moodle漏洞（MSA-18-0020 CVE-2018-16854 和 MSA-19-0004 CVE-2019-3847）的文件，这些漏洞利用了用户向其个人仪表板添加JavaScript的能力。MSA-18-0020依赖于登录表单上的CSRF，而MSA-19-0004则需要管理员模拟用户。 更多详情可在这篇博文中找到。 已修复的Moodle版本 MSA-18-0020 CVE-2018-16854: 3.6, 3.5.3, 3.4.6, 3.3.9, 和 3.1.15. MSA-19-0004 CVE-2019-3847: 3.6.3, 3.5.5,...

Timesheet Next Gen <=1.5.3 - Cross-Site Scripting

Timesheet Next Gen 1.5.3 and earlier is vulnerable to cross-site scripting that allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the...

Reflected-XSS-in-Vvveb-CMS-v1.0.7.2

Vvveb CMS v1.0.7.2 登录表单（邮箱与密码字段）中的反射型 XSS 作者： Andrew Paul 发现日期： 2025年8月12日 厂商： Vvveb 厂商 URL： http://vvveb.com 厂商 GitHub： https://github.com/givanz/Vvveb 受影响版本： 1.0.7.2（以及可能更早的版本） CVE ID： CVE-2025-9728 概述 用户登录表单中存在反射型跨站脚本（XSS）漏洞（CWE-79：网页生成期间对输入的不当中和（'跨站脚本'））。email 和 password 参数在回显到 HTML...

CVE-2023-38890

CVE-2023-38890 Descripción Online Shopping Portal Project V3.1 permite a atacantes remotos ejecutar comandos/consultas SQL arbitrarios a través del formulario de inicio de sesión, lo que conduce a un acceso no autorizado y una posible manipulación de datos. Esta vulnerabilidad surge debido a una...

CVE-2026-64638

CVE-2026-64638 CVE-2026-64638 fast try root@kitploit: import requests target = "http://127.0.0.1:9000/wp-login.php" payload = 'X' response = requests.posttarget, data="log": payload, "pwd": "x", timeout=5 printresponse.statuscode printresponse.text or root@kitploit: POST /wp-login.php HTTP/1.1...

CVE-2021-41511

CVE-2021-41511 漏洞标题: 住宿预订管理系统 1.0 - SQL注入/认证绕过 漏洞作者: Nitin Sharmavidvansh 厂商主页: https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html 软件链接:...

CVE-2021-42665

CVE-2021-42665 CVE-2021-42665 - 工程师在线门户系统中的SQL注入认证绕过漏洞。 技术描述： 在工程师在线门户系统的登录表单中存在一个SQL注入漏洞，攻击者可利用该漏洞绕过认证。 受影响组件 - 受影响页面 - login.php 受影响参数 - "username", "password" 利用步骤： 1. 导航至 http://localhost/niamunozmonitoringsystem/login.php 2. 在用户名或密码字段中插入有效载荷 3. 点击登录 概念验证（PoC） - 以下有效载荷将允许绕过工程师在线门户系统登录表单的认证机制 ...

CVE-2025-7892-Proof-of-Concept-Login-Form

CVE-2025-7892-概念验证-登录表单 演示视频：https://drive.google.com/file/d/16vr563yC9ub3NQP-f63KL95v0ZLbX5O/view?usp=drivelink 致谢 : https://github.com/KMov-g...

DRUPAL-CONTRIB-2026-110

This module enables you to disable access to the /user/login form unless a secret key is provided. The module does not sufficiently restrict repeated attempts to guess that key, allowing brute-force attacks against the access-control mechanism...

DEBIAN-CVE-2026-34964

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...

EUVD-2026-65197

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...

CVE-2026-34964

Adminer before 5.5.0 contains a server-side request forgery (SSRF) vulnerability in the login form's server field validator. The validator only inspects leading integers for privileged ports and fails to reject non-numeric port values, allowing attackers to inject PDO DSN keys such as host= and p...

CVE-2026-34964 Adminer before 5.5.0 SSRF via PDO DSN Injection

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...

PT-2026-81126

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...

CVE-2026-75778

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

EUVD-2026-60732

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

CVE-2026-75778 code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

CVE-2026-75778

Task Management System 1.0 has a SQL injection in Operation::select_with_multiple_condition within /index.php of the Login Form; the email argument is unparameterized. CVSS 7.3 (HIGH), exploitable remotely with no auth; proof-of-concept exploit is publicly available. No patch or workaround is doc...