PT-2022-11832

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Payment Hub version 1 Description The issue allows attackers to execute arbitrary SQL commands via the username parameter in the Login.php file. This enables potential unauthorized access and manipulation of database...

Sourcecodester Purchase Order Management System SQL注入漏洞

Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. SQL injection vulnerability exists in Sourcecodester Purchase Order Management System, which Sourcecodester Purchase Order Management...

PT-2022-11335

Name of the Vulnerable Software and Affected Versions Sourcecodester Storage Unit Rental Management System version v1 Description The issue allows attackers to execute arbitrary SQL commands via the username parameter to the "/storage/classes/Login.php" API endpoint. This enables potential...

CVE-2021-40596: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...

CVE-2021-43420: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

PT-2022-11336

Name of the Vulnerable Software and Affected Versions Sourcecodester Purchase Order Management System version v1 Description The issue allows attackers to execute arbitrary SQL commands via the username parameter in the Login.php file. This enables attackers to manipulate the database, potentiall...

Sql injection

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

CVE-2021-40595: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

PT-2022-11271

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Leave Management System version v1 Description The issue allows attackers to execute arbitrary SQL commands via the username parameter to the "/leave system/classes/Login.php" API endpoint. This enables attackers to...

PT-2022-12180

Name of the Vulnerable Software and Affected Versions Simple College Website version 1.0 Description The issue allows for unauthenticated file upload and remote code execution via UNION-based SQL injection in the username parameter on the "/admin/login.php" API endpoint. Recommendations For Simpl...

CVE-2021-44244

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

CVE-2021-44244: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

PT-2022-12026

Name of the Vulnerable Software and Affected Versions Sourcecodester Logistic Hub Parcel's Management System version 1.0 Description An SQL Injection issue exists in the system via the username parameter in the "login.php" endpoint. This allows for potential exploitation. Recommendations For...

Child's Day Care Management System 1.0 SQL Injection

Title: Child's Day Care Management System 1.0 SQL - Injection Author: nu11secur1ty Date: 12.16.2021 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15085/childs-day-care-management-system-phpoop-free-source-code.html Description: The username in...

Pluck Authorization Issues Vulnerabilities

Pluck is a content management system CMS developed using the PHP language. Pluck-CMS Pluck suffers from an authorization issue vulnerability that stems from a session repair vulnerability in login.php that allows an attacker to maintain unauthorized access to the platform. Since Pluck does not...

CVE-2021-31745

Session Fixation vulnerability in login.php in Pluck-CMS Pluck 4.7.15 allows an attacker to sustain unauthorized access to the platform. Because Pluck does not invalidate prior sessions after a password change, access can be sustained even after an administrator performs regular remediation...

CVE-2021-31745

CVE-2021-31745 affects Pluck-CMS (Pluck 4.7.15). A session-fixation vulnerability in login.php allows an attacker to sustain unauthorized access because prior sessions are not invalidated after a password change. The available documents describe the issue and do not specify a patch version or con...

CVE-2021-31745: Session Fixation

Session Fixation vulnerability in login.php in Pluck-CMS Pluck 4.7.15 allows an attacker to sustain unauthorized access to the platform. Because Pluck does not invalidate prior sessions after a password change, access can be sustained even after an administrator performs regular remediation...

PT-2021-19487

Name of the Vulnerable Software and Affected Versions Pluck-CMS Pluck version 4.7.15 Description The issue allows an attacker to sustain unauthorized access to the platform due to a session fixation vulnerability in the login.php file. This is because prior sessions are not invalidated after a...

CVE-2021-42580: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...