CVE-2021-43130

An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System CRM 1.0 via the username parameter in customer/login.php...

PT-2021-23748

Name of the Vulnerable Software and Affected Versions Sourcecodester Customer Relationship Management System CRM version 1.0 Description An SQL Injection issue exists via the username parameter in the "customer/login.php" endpoint. This allows for potential exploitation. Recommendations For versi...

CVE-2021-43130: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System CRM 1.0 via the username parameter in customer/login.php...

CVE-2020-23685: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php...

PT-2021-23369

Name of the Vulnerable Software and Affected Versions Sourcecodester E-Negosyo System version 1.0 Description An SQL Injection issue exists via the user email parameter in the "/admin/login.php" API endpoint. This allows for potential exploitation. Recommendations For Sourcecodester E-Negosyo...

CVE-2021-41674: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the useremail parameter in /admin/login.php...

Sql injection

Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php...

PT-2021-21625

Name of the Vulnerable Software and Affected Versions Online Student Admission System version 1.0 Description The issue is an unauthenticated SQL injection bypass vulnerability. It affects the /admin/login.php endpoint. Recommendations For Online Student Admission System version 1.0, as a tempora...

CVE-2021-37371: Improper Neutralization of Special Elements used in an SQL Command

Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php...

CVE-2018-16061

Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php...

Design/Logic Flaw

Mitsubishi Electric SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php...

CVE-2018-16061

Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php...

CVE-2018-16061: Improper Neutralization of Input During Web Page Generation

Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php...

CVE-2021-3834

Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack XSS...

CVE-2021-3834 Integria IMS vulnerable to Cross Site Scripting (XSS)

Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack XSS...

CVE-2021-3834

Integria IMS 5.0.92 is vulnerable to cross-site scripting (XSS) due to improper filtering of certain fields in login.php. The issue, described across CVE-2021-3834 records, is caused by inadequate input handling in a login-related form, enabling an attacker to inject/execute script content. The c...

CVE-2021-3834: Improper Neutralization of Input During Web Page Generation

Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack XSS...

CVE-2021-41647

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user...

PT-2021-23366

Name of the Vulnerable Software and Affected Versions Kaushik Jadhav Online Food Ordering Web App version 1.0 Description An un-authenticated error-based and time-based blind SQL injection issue exists. An attacker can exploit the vulnerable username parameter in "login.php" and retrieve sensitiv...

CVE-2021-41647: Improper Neutralization of Special Elements used in an SQL Command

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user...