72 matches found
EUVD-2023-54557
Malicious code in bioql PyPI...
CVE-2025-57104: Improper Neutralization of Special Elements used in an SQL Command
Teampel 5.1.6 is vulnerable to SQL Injection in /Common/login.aspx...
Teampel 安全漏洞
Teampel is a private cloud office platform from Teampel Inc. A security vulnerability exists in Teampel version 5.1.6, which originates from the file /Common/login.aspx being susceptible to SQL injection attacks...
CVE-2009-2612
SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2024-45876: Improper Neutralization of Special Elements used in an SQL Command
The login form of baltic-it TOPqw Webportal v1.35.283.2 fixed in version 1.35.283.4 at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerability exists in the POST parameter txtUsername, which allows for manipulation of SQL queries...
The vulnerability of the Orion Login.aspx page of the SolarWinds Platform’s network monitoring and IT infrastructure management software allows a perpetrator to carry out a brute-force attack.
The vulnerability of the Orion Login.aspx page of the SolarWinds IT infrastructure monitoring and management software is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack...
CVE-2023-6342: Improper Authentication
Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprintCM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01...
Sql injection
A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the...
CVE-2023-5828 Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System login.aspx sql injection
A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the...
CVE-2023-5828: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the...
Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System Security Vulnerabilities
Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System is a project construction and installation management system of Nanning Ontall Longxing Industrial Company in China. Company in China. A security vulnerability exists in Nanning Ontall...
PT-2023-32360 · Unknown · Nanning Ontall Longxing Industrial Development Zone Project Construction/Installation Management System
Name of the Vulnerable Software and Affected Versions: Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System versions up to 20231026 Description: A critical issue has been found in the system, affecting an unknown functionality of the file...
Cross site scripting
A vulnerability classified as problematic has been found in TOTVS RM 12.1. Affected is an unknown function of the file Login.aspx of the component Portal. The manipulation of the argument VIEWSTATE leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this...
CVE-2023-4709 TOTVS RM Portal Login.aspx cross site scripting
A vulnerability classified as problematic has been found in TOTVS RM 12.1. Affected is an unknown function of the file Login.aspx of the component Portal. The manipulation of the argument VIEWSTATE leads to cross site scripting. It is possible to launch the attack remotely. The complexity of an...
CVE-2023-4709
TOTVS RM 12.1 Portal.Login.aspx vulnerable to cross-site scripting via VIEWSTATE manipulation. Impact described as remote exploitation with high attack complexity and low/none exploitation risk in defaults, but configurable environments can still be affected. Affected component: Login.aspx in Por...
CVE-2023-4709: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in TOTVS RM 12.1. Affected is an unknown function of the file Login.aspx of the component Portal. The manipulation of the argument VIEWSTATE leads to cross site scripting. It is possible to launch the attack remotely. The complexity of an...
PT-2023-30298 · Totvs · Totvs Rm
Name of the Vulnerable Software and Affected Versions: TOTVS RM version 12.1 Description: A problematic vulnerability has been found in the Portal component of TOTVS RM, specifically in the Login.aspx file. The issue arises from the manipulation of the VIEWSTATE argument, leading to cross-site...
CVE-2021-37599: Improper Neutralization of Special Elements used in an SQL Command
The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the database and execute code in some situations via the txtPassword parameter...
Design/Logic Flaw
BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx...
