2574 matches found
CVE-2022-2086 SourceCodester Bank Management System login.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...
CVE-2022-2086 SourceCodester Bank Management System login.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...
PT-2022-14847
Name of the Vulnerable Software and Affected Versions SourceCodester Bank Management System version 1.0 Description A critical issue has been found in the login functionality. The manipulation of the password argument with a specific input leads to SQL injection. The attack can be launched...
CVE-2022-2086: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...
Home Clean Services Management System SQL Injection Vulnerability
Home Clean Services Management System is a home cleaning service system. version 1.0 of Home Clean Services Management System is vulnerable to a SQL injection issue in login.php. An attacker could exploit this vulnerability to obtain sensitive database information...
CVE-2022-31339: Improper Neutralization of Special Elements used in an SQL Command
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php...
PT-2022-20696
Name of the Vulnerable Software and Affected Versions Simple Inventory System version 1.0 Description The issue allows for SQL Injection via the "/inventory/login.php" API endpoint. Recommendations For Simple Inventory System version 1.0, consider disabling the login functionality in...
Sql injection
A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...
CVE-2022-1839 Home Clean Services Management System login.php sql injection
A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...
CVE-2022-1839
CVE-2022-1839 covers a SQL injection in Home Clean Services Management System 1.0, specifically in the login.php file. The vulnerability arises from manipulating the email parameter (example payload: admin%'//AND/ /(SELECT//5383/ /FROM//(SELECT(SLEEP(2)))JPeh)/ /AND/**/'frfq%'='frfq) which leads ...
PT-2022-14157
Name of the Vulnerable Software and Affected Versions Home Clean Services Management System version 1.0 Description A critical vulnerability was found in the Home Clean Services Management System, affecting the file login.php. The manipulation of the email argument with a specific input leads to...
PT-2022-14156
Name of the Vulnerable Software and Affected Versions Home Clean Services Management System version 1.0 Description A critical issue has been discovered, affecting an unknown part of the admin/login.php component. The manipulation of the username argument with a specific input leads to SQL...
CVE-2022-1838: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Home Clean Services Management System 1.0. This affects an unknown part of admin/login.php. The manipulation of the argument username with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP5JPeh//AND//'frfq%'='frfq leads to sql...
CVE-2022-1839: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...
CVE-2022-28531
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...
PT-2022-19069
Name of the Vulnerable Software and Affected Versions Sourcecodester Covid-19 Directory on Vaccination System version 1.0 Description The system is susceptible to SQL Injection attacks through the txtusername field, also known as the Username field, located in the admin/login.php endpoint. This...
CVE-2022-28531: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...
CVE-2022-28060
SQL Injection vulnerability in Victor CMS v1.0, via the username parameter to /includes/login.php...
PT-2022-18787
Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue is related to a SQL Injection vulnerability. It can be exploited via the user name parameter to the "/includes/login.php" API endpoint. Recommendations For Victor CMS version 1.0, consider restricti...
CVE-2022-28060: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Victor CMS v1.0, via the username parameter to /includes/login.php...