2574 matches found
CVE-2022-3579: Improper Neutralization
A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affects unknown code of the file /queuing/login.php of the component Login Page. The manipulation of the argument username/password leads to sql injection. The attack can be initiated...
CVE-2021-41433: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application login form by EGavilan Media that allows authentication bypass through login.php...
CVE-2022-3130 codeprojects Online Driving School login.php sql injection
A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown part of the file /login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2022-3130
CVE-2022-3130 affects codeprojects Online Driving School, with a SQL injection in an unknown part of /login.php triggered by manipulating the username parameter. The vulnerability is exploitable remotely, and multiple sources confirm public disclosure of exploits/PoCs. Affected versions are not s...
CVE-2022-3130: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown part of the file /login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2022-36581
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...
CVE-2022-36581: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...
CVE-2022-2842 SourceCodester Gym Management System login.php sql injection
A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...
CVE-2022-2842 SourceCodester Gym Management System login.php sql injection
A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...
CVE-2022-2842: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...
CVE-2022-35516
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php...
CVE-2022-35516
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php...
Remote code execution
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php...
CVE-2022-35516
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php...
CVE-2022-35516
CVE-2022-35516 affects DedeCMS v5.7.93–v5.7.96. The connected documents describe a remote code execution vulnerability in login.php, enabling an attacker to run arbitrary code on the affected system. No concrete exploit details, status, or remediation/patch version is provided in the supplied sou...
CVE-2022-35516
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php...
PT-2022-22878
Name of the Vulnerable Software and Affected Versions DedeCMS versions 5.7.93 through 5.7.96 Description A remote code execution issue was found in the login.php file. This allows for potential code execution by remote attackers. Recommendations For versions 5.7.93 through 5.7.96, update to a...
CVE-2022-35516: Improper Control of Generation of Code
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php...
Cross site scripting
A vulnerability has been found in SourceCodester Simple and Nice Shopping Cart Script and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /mkshope/login.php. The manipulation of the argument msg leads to cross site scripting. The attack can be...
CVE-2022-2814: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in SourceCodester Simple and Nice Shopping Cart Script and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /mkshope/login.php. The manipulation of the argument msg leads to cross site scripting. The attack can be...