bbPress Cross-site Scripting (XSS) vulnerability

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter...

PT-2022-18737

Name of the Vulnerable Software and Affected Versions Online Banking System in PHP version 1 Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/staff login.php" endpoint via the Staff ID and Staff Password parameters. Recommendations...

Client management SQL injection vulnerability

Simple Client Management System is a simple web-based application that provides an online platform to manage company customer invoices.Simple Client Management System 1.0 is vulnerable to a SQL injection vulnerability that could be caused by a password parameter in Login.php. No detailed...

CVE-2021-43506

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

Sql injection

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

CVE-2021-43506

The vulnerability CVE-2021-43506 affects Sourcecodester Simple Client Management System 1.0, where an SQL Injection can be triggered via the password parameter in Login.php. The root cause is improper input handling leading to unauthorized access or data exposure. Multiple sources (NVD and Red Ha...

PT-2022-11861

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description An SQL Injection issue exists via the password parameter in Login.php. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client Management...

CVE-2021-43506: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

Patient Appointment Scheduler System SQL Injection Vulnerability

Patient Appointment Scheduler System is a patient appointment scheduling system project. It provides an online platform for clinic patients or potential patients to schedule appointments with physicians. patient Appointment Scheduler System version 1.0 contains a SQL injection vulnerability that...

CVE-2022-24131: Improper Neutralization of Input During Web Page Generation

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting XSS through /admin/login.php in the background, which will lead to JavaScript code execution...

PT-2022-16484

Name of the Vulnerable Software and Affected Versions DouPHP version 1.6 Release 20220121 Description The issue affects the background of DouPHP through the "/admin/login.php" API endpoint, allowing for Cross Site Scripting XSS attacks, which can lead to JavaScript code execution. Recommendations...

PT-2022-13638

Name of the Vulnerable Software and Affected Versions Automatic Question Paper Generator System version 1.0 Description A problematic issue has been found, affecting the My Account Page component, specifically the file /aqpg/users/login.php. The manipulation of the First Name, Middle Name, and La...

CVE-2022-1076: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...

PT-2022-13644

Name of the Vulnerable Software and Affected Versions SourceCodester Microfinance Management System version 1.0 Description A critical issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1' leads to sql injection. The...

CVE-2022-1082: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...

PT-2022-11896

Name of the Vulnerable Software and Affected Versions Spotweb versions 1.5.1 and below Description The issue is related to a Cross Site Scripting XSS vulnerability in the SpotPage login.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the...

PT-2022-17330

Name of the Vulnerable Software and Affected Versions Online Banking System version 1.0 Description The Online Banking System contains a SQL injection issue via the staff login.php file. This allows for potential exploitation. Recommendations For Online Banking System version 1.0, consider...

CVE-2022-24600: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements...

PT-2022-16748

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue allows for SQL Injection through the /admin/login.php endpoint. An attacker can exploit this to log in to the background using SQL injection statements. Recommendations For Luocms version 2.0, consider...

CVE-2022-25013

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...