1065 matches found
CVE-2020-9495
CVE-2020-9495 PoC CVE-2020-9495 是 Apache Archiva 2.2.5 之前版本中的一个中等严重程度的 LDAP 注入漏洞。它允许攻击者检索 LDAP 服务器上存在的用户的任何 LDAP 属性值。 来自 Apache Archiva 官方公告: 通过向 Archiva 登录表单提供特殊值,攻击者能够从连接的 LDAP 服务器检索用户属性数据。通过使用特定字符,可以修改用于查询连接 LDAP 服务器上用户的 LDAP 过滤器。通过测量响应时间,可以从 LDAP 用户对象中检索任意属性数据。 PoC poc.py 脚本演示了未经授权的攻击者如何枚举与...
CVE-2023-26469-Jorani
CVE-2023-26469 漏洞利用工具 概述 这是一个针对 Jorani 1.0.0 版本的漏洞利用工具(PoC),该漏洞允许攻击者通过路径遍历和日志注入技术实现远程代码执行。 ⚠️ 警告:此工具仅用于安全研究和授权测试。未经授权使用此工具进行攻击是非法的。 漏洞描述 CVE-2023-26469 是 Jorani 1.0.0 中的一个严重安全漏洞,结合了以下两个攻击向量: 1. 日志注入 :通过登录表单向应用程序日志文件注入恶意 PHP 代码 2. 路径遍历 :利用路径遍历漏洞访问并执行被注入的日志文件 攻击者可以利用这个漏洞在目标服务器上执行任意系统命令。 功能特性 自动获取...
moodle-login-csrf
此仓库包含用于发现和利用两个Moodle漏洞(MSA-18-0020 CVE-2018-16854 和 MSA-19-0004 CVE-2019-3847)的文件,这些漏洞利用了用户向其个人仪表板添加JavaScript的能力。MSA-18-0020依赖于登录表单上的CSRF,而MSA-19-0004则需要管理员模拟用户。 更多详情可在这篇博文中找到。 已修复的Moodle版本 MSA-18-0020 CVE-2018-16854: 3.6, 3.5.3, 3.4.6, 3.3.9, 和 3.1.15. MSA-19-0004 CVE-2019-3847: 3.6.3, 3.5.5,...
Timesheet Next Gen <=1.5.3 - Cross-Site Scripting
Timesheet Next Gen 1.5.3 and earlier is vulnerable to cross-site scripting that allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the...
Reflected-XSS-in-Vvveb-CMS-v1.0.7.2
Vvveb CMS v1.0.7.2 登录表单(邮箱与密码字段)中的反射型 XSS 作者: Andrew Paul 发现日期: 2025年8月12日 厂商: Vvveb 厂商 URL: http://vvveb.com 厂商 GitHub: https://github.com/givanz/Vvveb 受影响版本: 1.0.7.2(以及可能更早的版本) CVE ID: CVE-2025-9728 概述 用户登录表单中存在反射型跨站脚本(XSS)漏洞(CWE-79:网页生成期间对输入的不当中和('跨站脚本'))。email 和 password 参数在回显到 HTML...
CVE-2023-38890
CVE-2023-38890 Descripción Online Shopping Portal Project V3.1 permite a atacantes remotos ejecutar comandos/consultas SQL arbitrarios a través del formulario de inicio de sesión, lo que conduce a un acceso no autorizado y una posible manipulación de datos. Esta vulnerabilidad surge debido a una...
CVE-2026-64638
CVE-2026-64638 CVE-2026-64638 fast try root@kitploit: import requests target = "http://127.0.0.1:9000/wp-login.php" payload = 'X' response = requests.posttarget, data="log": payload, "pwd": "x", timeout=5 printresponse.statuscode printresponse.text or root@kitploit: POST /wp-login.php HTTP/1.1...
CVE-2021-41511
CVE-2021-41511 漏洞标题: 住宿预订管理系统 1.0 - SQL注入/认证绕过 漏洞作者: Nitin Sharmavidvansh 厂商主页: https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html 软件链接:...
CVE-2021-42665
CVE-2021-42665 CVE-2021-42665 - 工程师在线门户系统中的SQL注入认证绕过漏洞。 技术描述: 在工程师在线门户系统的登录表单中存在一个SQL注入漏洞,攻击者可利用该漏洞绕过认证。 受影响组件 - 受影响页面 - login.php 受影响参数 - "username", "password" 利用步骤: 1. 导航至 http://localhost/niamunozmonitoringsystem/login.php 2. 在用户名或密码字段中插入有效载荷 3. 点击登录 概念验证(PoC) - 以下有效载荷将允许绕过工程师在线门户系统登录表单的认证机制 ...
CVE-2025-7892-Proof-of-Concept-Login-Form
CVE-2025-7892-概念验证-登录表单 演示视频:https://drive.google.com/file/d/16vr563yC9ub3NQP-f63KL95v0ZLbX5O/view?usp=drivelink 致谢 : https://github.com/KMov-g...
DRUPAL-CONTRIB-2026-110
This module enables you to disable access to the /user/login form unless a secret key is provided. The module does not sufficiently restrict repeated attempts to guess that key, allowing brute-force attacks against the access-control mechanism...
DEBIAN-CVE-2026-34964
Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...
EUVD-2026-65197
Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...
CVE-2026-34964
Adminer before 5.5.0 contains a server-side request forgery (SSRF) vulnerability in the login form's server field validator. The validator only inspects leading integers for privileged ports and fails to reject non-numeric port values, allowing attackers to inject PDO DSN keys such as host= and p...
CVE-2026-34964 Adminer before 5.5.0 SSRF via PDO DSN Injection
Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...
PT-2026-81126
Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...
CVE-2026-75778
A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...
EUVD-2026-60732
A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...
CVE-2026-75778 code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection
A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...
CVE-2026-75778
Task Management System 1.0 has a SQL injection in Operation::select_with_multiple_condition within /index.php of the Login Form; the email argument is unparameterized. CVSS 7.3 (HIGH), exploitable remotely with no auth; proof-of-concept exploit is publicly available. No patch or workaround is doc...