PT-2023-18365

Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0 Description A critical issue affects some unknown functionality of the file /function/login.php. The manipulation of the email argument leads to sql injection. The attack can be launche...

CVE-2022-31888

Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2...

PT-2023-13053 · Osticket · Osticket

Name of the Vulnerable Software and Affected Versions: osTicket versions through 1.16.2 Description: The issue is related to a Session Fixation vulnerability in the login function within class.auth.php of osTicket. This vulnerability allows an attacker to potentially hijack user sessions...

PT-2023-15575 · Sipe S.R.L · Wi400

Name of the Vulnerable Software and Affected Versions: SIPE s.r.l WI400 versions 8 through 11 Description: A cross-site scripting XSS issue in the check login function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the f parameter. This enables the...

CVE-2023-22900

Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

PT-2023-7468

Name of the Vulnerable Software and Affected Versions Efence affected versions not specified Description The issue is related to insufficient validation for user input in the Efence login function. This allows an unauthenticated remote attacker to inject arbitrary SQL commands, potentially...

CVE-2022-39042

aEnrich a+HRD has improper validation for login function. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access API function to perform arbitrary system command or disrupt service...

CVE-2022-23468

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in xrdploginwndcreate function. There are no known workarounds for this issue. Users are advised to upgrade...

Authentication flaw

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service...

CVE-2022-3804

A vulnerability was found in eolinker apinto-dashboard. It has been classified as problematic. Affected is an unknown function of the file /login. The manipulation of the argument callback leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed ...

PT-2022-20016 · Sourcecodester · Sourcecodester Simple Task Managing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Task Managing System affected versions not specified Description: A critical vulnerability has been found in the SourceCodester Simple Task Managing System, affecting an unknown part of the file /loginVaLidation.php. The...

CVE-2022-2674

CVE-2022-2674 affects SourceCodester Best Fee Management System: the login function in admin_class.php is vulnerable to SQL injection via the username parameter. This can be exploited remotely, with public exploit availability noted. Impact is described as critical in the CVE entry. No remediatio...

CVE-2022-2674: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best Fee Management System. It has been rated as critical. Affected by this issue is the function login of the file adminclass.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has be...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425

The CVE-2022-32425 entry concerns Mealie (v1.0.0beta-2) where the login function enables username enumeration by measuring response time, indicating an information-disclosure vulnerability. Affected software: Mealie v1.0.0beta-2 (login feature). Root cause: timing-based information leakage during...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-29272

In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing...

CVE-2022-29272: URL Redirection to Untrusted Site

In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing...

PT-2022-19514

Name of the Vulnerable Software and Affected Versions Nagios XI versions 5.8.5 and earlier Description An open redirect issue exists in the login function, which could lead to spoofing. Recommendations For Nagios XI versions 5.8.5 and earlier, update to a version that contains a fix for this issu...

Nagios XI input validation vulnerability

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 5.8.5 and prior versions, which stems from an open...