429 matches found
D-LINK 619L 安全漏洞
D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability, which originates from the curTime...
D-Link 619L 安全漏洞
D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the FILECODE...
CVE-2023-28799
A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain...
PT-2023-23371 · Unknown · Pharmacy Management System
Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the email parameter at the login core.php file. Recommendations: For Pharmacy Management System...
CVE-2023-27089
Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login parameter...
Cross site scripting
Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login parameter...
PT-2023-20945 · Unknown · Ehuacui Bbs
Name of the Vulnerable Software and Affected Versions: Ehuacui BBS affected versions not specified Description: A Cross Site Scripting issue allows attackers to cause a denial of service via a crafted payload in the login parameter. Recommendations: At the moment, there is no information about a...
ehuacui-bbs 跨站脚本漏洞
ehuacui-bbs is ehuacui open source a bbs forum system. ehuacui-bbs has a security vulnerability that can be exploited by an attacker to cause a denial of service via a specially crafted payload in the login parameter...
EyouCMS 跨站脚本漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A security vulnerability exists in EyouCMS versions prior to 1.5.4. The vulnerability stems from an unknown function in the file login.php, whic...
Monitoring of Students Cyber Accounts System SQL注入漏洞
Monitoring of Students Cyber Accounts System is a Monitoring of Students Cyber Accounts System by Chris Jim Egot Individual Developer. A SQL injection vulnerability exists in SourceCodester Monitoring of Students Cyber Accounts System version 1.0, which stems from a problem with the file login.ph...
XHCMS SQL注入漏洞
XHCMS is a general-purpose CMS system developed by huzizhaz. A SQL injection vulnerability exists in XHCMS version 1.0, which originates from the presence of unknown code in the file login.php in the component POST Parameter Handler, which leads to sql injection via the parameter user...
PT-2023-16702 · Sourcecodester · Sourcecodester Online Hotel Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Boat Reservation System version 1.0 Description: A vulnerability has been found in the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross site scripting. The...
Exploit for SQL Injection in Simple_Task_Managing_System_Project Simple_Task_Managing_System
CVE-2022-40032: Simple Task Managing System - 'login' and 'pas...
SUSE CVE-2005-3893
Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System OTRS 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 user parameter in the Login action, and remote authenticated users via the...
SUSE CVE-2012-3540
Open redirect vulnerability in views/authforms.py in OpenStack Dashboard Horizon Essex 2012.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by...
Online Food Ordering System SQL注入漏洞
Online Food Ordering System is an online food ordering system. Online Food Ordering System suffers from a SQL injection vulnerability, which originates from the lack of validation of an externally entered SQL statement in the Username parameter of the component's login page, action = login, which...
VulnCheck KEV: CVE-2022-44877
CWP Control Web Panel formerly CentOS Web Panel contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter...
web-cyradm SQL注入漏洞
web-cyradm is web-cyradm open source a web-based software. web-cyradm has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter login/loginpassword/LANG leads to sql injection...
CVE-2022-44877
login/index.php in CWP aka Control Web Panel or CentOS Web Panel 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter...
CVE-2022-44877
login/index.php in CWP aka Control Web Panel or CentOS Web Panel 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter...