PT-2024-38712

Name of the Vulnerable Software and Affected Versions: SourceCodester Point of Sales and Inventory Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Point of Sales and Inventory Management System. This affects an unknown part of the file...

CVE-2024-43009: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in user/login.php at line 24 in ZZCMS 2023 and earlier. The application directly inserts the value of the HTTPREFERER header into the HTML response without proper sanitization. An attacker can exploit this vulnerability by tricking a user...

CVE-2024-7681: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiate...

CVE-2024-7681 code-projects College Management System Login Page login.php sql injection

A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiate...

PT-2024-29318

Name of the Vulnerable Software and Affected Versions Kashipara Responsive School Management System version 3.2.0 Description A Reflected Cross Site Scripting XSS issue was found in the "/smsa/teacher login.php" endpoint, allowing remote attackers to execute arbitrary code via the error parameter...

PT-2024-29315

Name of the Vulnerable Software and Affected Versions Kashipara Responsive School Management System version 1.0 Description A SQL injection issue allows an attacker to execute arbitrary SQL commands via the username parameter in the "/smsa/teacher login.php" API endpoint. Recommendations For...

CVE-2024-33971: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'username' in '/login.php' parameter...

CVE-2024-7498: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to...

CVE-2024-7449

CVE-2024-7449 affects itsourcecode Placement Management System 1.0. The login.php file contains an SQL injection in the email parameter, enabling remote exploitation. Descriptions indicate exploitation is publicly disclosed and potentially usable. Impact is described as critical with possible dat...

CVE-2024-7449: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-7444: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in itsourcecode Ticket Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Login Page. The manipulation of the argument username leads to sql injection. The attack can be launche...

PT-2024-38354 · Unknown · Itsourcecode Ticket Reservation System

Name of the Vulnerable Software and Affected Versions: itsourcecode Ticket Reservation System version 1.0 Description: A critical issue was found in the itsourcecode Ticket Reservation System, affecting an unknown functionality of the file login.php of the component Login Page. The manipulation o...

The vulnerability of the client.so file of the Ruijie EG-2000SE software allows a hacker to gain access to the user account and gain control over the system.

The vulnerability of the client.so file of the Ruijie EG-2000SE microprogramming system lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to gain access to the user account and execute commands to gain control of the system...

CVE-2024-6966

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php of the component Login. The manipulation of the argument user/pass leads to sql injection. The attack may be...

CVE-2024-6966

CVE-2024-6966 affects itsourcecode Online Blood Bank Management System 1.0, specifically the Login component (login.php). The vulnerability is a SQL injection triggered by manipulating the user/pass argument, with remote access possible and public disclosure of exploits. Multiple sources corrobor...

CVE-2024-6966: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php of the component Login. The manipulation of the argument user/pass leads to sql injection. The attack may be...

CVE-2019-16641

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EGRGOS 11.11B1...

CVE-2019-16641

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EGRGOS 11.11B1...

CVE-2024-40393: Improper Neutralization of Special Elements used in an SQL Command

Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php...

CVE-2019-16641

The Ruijie EG-2000 series gateway (specifically version EG-2000SE EG_RGOS 11.1(1)B1 ) is vulnerable to a stack-based buffer overflow in the client.so file. A malicious actor can exploit this by utilizing the login.php script to bypass authentication and log into any account without a password, po...