2574 matches found
Cross site scripting
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-25013
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-25013
Ice Hrm 30.0.0.OS is vulnerable to multiple reflected XSS in login.php via the key and fm parameters. The CNVD entry cites lack of checksum filtering of user-supplied data and output data in these parameters as the root cause; other sources describe the issue as reflected XSS without detailing a ...
CVE-2022-25013
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-25013
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-25013: Improper Neutralization of Input During Web Page Generation
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
PT-2022-17046
Name of the Vulnerable Software and Affected Versions Ice Hrm version 30.0.0.OS Description The issue is related to multiple reflected cross-site scripting XSS vulnerabilities. These vulnerabilities are exploited via the key and fm parameters in the component login.php. Recommendations For Ice Hr...
CVE-2022-24223
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
Sql injection
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
CVE-2022-24223
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
CVE-2022-24223
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
PT-2022-11863
Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description A SQL Injection issue exists via the username field in the "login.php" file. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client...
CVE-2021-43510: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php...
CVE-2022-24223: Improper Neutralization of Special Elements used in an SQL Command
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
CVE-2020-25905
An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in 1 login.php or 2 LoginAsAdmin.php...
CVE-2021-45435: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php...
CVE-2020-25905
An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in 1 login.php or 2 LoginAsAdmin.php...
CVE-2020-25905: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in 1 login.php or 2 LoginAsAdmin.php...
Online Payment Hub SQL注入漏洞
Online Payment Hub is an online payment hub for Carlo Montero personal developers. The Online Payment Hub is vulnerable to SQL injection due to a lack of filtering and escaping of SQL data in Login.php, which could be exploited to execute arbitrary SQL commands via the username parameter...
SourceCodester Storage Unit Rental Management System SQL Injection Vulnerability
SourceCodester Storage Unit Rental Management System is a storage unit rental management system that helps manage storage unit rental business records and monitor their records. sourceCodester Storage Unit Rental Management A SQL injection vulnerability exists in the v1 version of the System. The...