PT-2022-22447

Name of the Vulnerable Software and Affected Versions Pharmacy Management System version 1.0 Description The issue is related to SQL injection vulnerabilities. These vulnerabilities can be exploited via the email or password parameter at the "login.php" endpoint. Recommendations For Pharmacy...

CVE-2022-34949: Improper Neutralization of Special Elements used in an SQL Command

Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at login.php...

Sql injection

A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username with the input email protected' AND SELECT 6427 FROM SELECTSLEEP5LwLu AND 'hsvT'='hsv...

PT-2022-16788

Name of the Vulnerable Software and Affected Versions SourceCodester Garage Management System version 1.0 Description A critical issue has been found in the software, affecting the /login.php file. The manipulation of the username argument with a specific input leads to sql injection. The attack...

CVE-2022-2467: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username with the input [email protected]' AND SELECT 6427 FROM SELECTSLEEP5LwLu AND 'hsvT'='hsvT leads ...

CVE-2022-1732 Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF

The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack...

PT-2022-14081

Name of the Vulnerable Software and Affected Versions Rename wp-login.php WordPress plugin versions prior to 2.6.1 Description The issue concerns the lack of a CSRF check when updating the secret login URL. This could allow attackers to make a logged-in admin change the URL via a CSRF attack...

CVE-2022-1732: Cross-Site Request Forgery (CSRF)

The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack...

Cross site scripting

Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...

CVE-2021-37524

Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...

CVE-2021-37524: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php...

PT-2022-10656

Name of the Vulnerable Software and Affected Versions FusionPBX version 4.5.26 Description A Cross Site Scripting XSS issue allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized path parameter in the "resources/login.php" endpoint. Recommendations For...

CVE-2022-33119

NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting XSS vulnerability via login.php...

Cross site scripting

NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting XSS vulnerability via login.php...

CVE-2022-33119

NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting XSS vulnerability via login.php...

CVE-2022-33119

NUUO NVRsolo Video Recorder v03.06.02 is affected by a reflected cross-site scripting (XSS) vulnerability in login.php. The issue allows an attacker to inject and execute arbitrary script in the victim’s browser, with potential impact including session hijacking, defacement, or leakage of sensiti...

CVE-2022-33119: Improper Neutralization of Input During Web Page Generation

NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting XSS vulnerability via login.php...

PT-2022-21698

Name of the Vulnerable Software and Affected Versions NUUO Network Video Recorder NVRsolo version 03.06.02 Description A reflected cross-site scripting XSS issue was found in the login.php file. This issue can be exploited via the "login.php" endpoint. The estimated number of potentially affected...

Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF

The plugin does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack document.getElementById"test".submit;...

CVE-2022-2086

A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...