SourceCodester Simple Realtime Quiz System SQL注入漏洞

SourceCodester Simple Realtime Quiz System is a real-time quiz system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Simple Realtime Quiz System version 1.0, which stems from an SQL injection vulnerability in the username parameter of the Login component in the...

PT-2024-38297 · Sourcecodester · Sourcecodester Tracking Monitoring Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Tracking Monitoring Management System version 1.0 Description: A critical issue has been found in the Login component, specifically affecting the /ajax.php?action=login file. The manipulation of the username argument leads to S...

PT-2024-38300 · Sourcecodester · Sourcecodester Simple Realtime Quiz System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Realtime Quiz System version 1.0 Description: A critical issue affects the processing of the file "/ajax.php?action=login" in the Login component. The manipulation of the username argument leads to SQL injection. This...

CVE-2024-7279

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated...

PT-2024-38235 · Sourcecodester · Sourcecodester Establishment Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Establishment Billing Management System version 1.0 Description: A critical issue affects the Login component, specifically the file "/admin/ajax.php?action=login", where manipulation of the username argument leads to sql...

CVE-2024-7219

A vulnerability has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack...

PT-2024-38179

Name of the Vulnerable Software and Affected Versions: SourceCodester School Log Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /admin/ajax.php?action=login. The manipulation of the username argument leads to SQL...

CVE-2024-7196

A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack...

SourceCodester School Fees Payment System 安全漏洞

SourceCodester School Fees Payment System is a school fees payment system. A security vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System due to an SQL injection vulnerability in the username parameter of the /ajax.php?action=login file...

PT-2024-38126 · Unknown · Sourcecodester School Fees Payment System

Name of the Vulnerable Software and Affected Versions: SourceCodester School Fees Payment System version 1.0 Description: A critical issue has been found in the system, affecting the /ajax.php?action=login file. The manipulation of the username argument leads to SQL injection. The attack can be...

PT-2024-28825 · Unknown · Online Clinic Management System In Php With Free Source Code

Name of the Vulnerable Software and Affected Versions: Online Clinic Management System In PHP With Free Source code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the user parameter at the "login.php" API endpoint...

PT-2024-37405 · Unknown · Spa-Cartcms

Name of the Vulnerable Software and Affected Versions: spa-cartcms version 1.9.0.6 Description: A problematic issue was found in the Username Handler component, specifically in the /login file, where manipulating the email argument leads to observable behavioral discrepancy. This issue can be...

CVE-2022-45168

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /login/backupcode endpoint and the /api/v1/vdeskintegration/createbackupcodes endpoint, because the application allows a user to generate or regenerate the backup codes...

PT-2024-27116 · Unknown · Sourcecodester Pharmacy/Medical Store Point Of Sale System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Pharmacy/Medical Store Point of Sale System version 1.0 Description: The issue stems from inadequate validation of user inputs for the email and password parameters in the "login.php" endpoint, allowing attackers to inject...

PT-2024-23727 · Mintplex · Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm affected versions not specified Description: A JSON Injection issue exists in the application, specifically within the username parameter during the login process at the "/api/request-token" endpoint. This issue...

PT-2024-22038 · Clarisa · Claris Filemaker Server

Name of the Vulnerable Software and Affected Versions: Claris FileMaker Server versions prior to 20.3.2 Description: The issue is related to a reflected Cross-Site Scripting vulnerability due to an improperly handled parameter in the FileMaker WebDirect login endpoint. This vulnerability was...

PT-2024-21959 · Unknown · Corezoid Process Engine

Name of the Vulnerable Software and Affected Versions: Corezoid Process Engine version 6.5.0 Description: The issue allows attackers to redirect users to arbitrary websites by appending a crafted link to the /login/ endpoint in the login page URL. This can be exploited by adding a malicious link ...

Meta4 HR Cross-Site Scripting Vulnerability

Cegid Meta4 HR is a human resource management software HRM platform from Cegid. A cross-site scripting vulnerability exists in Meta4 HR version 819.001.022 and earlier, which stems from a cross-site scripting XSS vulnerability in the endpoint /segenerico/genericologin.jsp...

PT-2024-20889 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Management System version 1.0 Description: A SQL injection issue allows a local attacker to obtain sensitive information via a crafted payload to the txtemail parameter in the "login.php" endpoint. This enables the attacker to...

PT-2024-20264 · Unknown · Scholars Tracking System

Name of the Vulnerable Software and Affected Versions: Scholars Tracking System version 1.0 Description: The issue allows attackers to run arbitrary code via the login.php endpoint. This is achieved through a SQL Injection attack, where an attacker can inject malicious SQL code to manipulate the...