WordPress Integrator 1.32 - Cross-Site Scripting

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...

NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting

NUUO NVRsolo Video Recorder 03.06.02 contains a reflected cross-site scripting vulnerability via login.php. id: CVE-2022-33119 info: name: NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting author: arafatansari severity: medium description: | NUUO NVRsolo Video Recorder 03.06.02 contains...

CVE-2025-47227

CVE-2025-47227 Exploit para CVE-2025-47227 - Restablecimiento de contraseña de ScriptCase Pre-Auth CVE-2025-47227 es una omisión de autenticación pre-auth CVSS 9.8 en el entorno de producción de ScriptCase ≤ 9.12.006. El endpoint login.php permite restablecer la contraseña del administrador sin...

CVE-2022-45599

CVE-2022-45599 CVE URL:| https://vulners.com/cve/CVE-2022-45599 ---|--- Reported by:| TanYeeTat Product:| Aztech WMB250AC Wireless Mesh Routers Affected Firmware:| 2020 Release topaz-linux.lzma.img Firmware download:| closed source Product Manual: https://kylaconnect.com/download-center/...

CVE-2026-30252

ZenShare Suite - Divulgación de vulnerabilidades Este repositorio contiene detalles sobre múltiples vulnerabilidades de Cross-Site Scripting XSS reflejado descubiertas en la aplicación ZenShare Suite. Resumen de la vulnerabilidad La aplicación ZenShare Suite es vulnerable a Cross-Site Scripting X...

xss2shell-check

xss2shell-check Detector no destructivo y sin dependencias para la primitiva de reflexión CVE-2026-64638 "XSS2Shell" en wp-login.php de WordPress. Antecedentes CVE-2026-64638 es un XSS reflejado preautenticado en el núcleo de WordPress , divulgado por PWN.AI el 2026-08-07 CVSS 8.9, CWE-79 y...

CVE-2026-93979

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-93980

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from...

CVE-2026-93978

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available...

CVE-2026-93980 code-projects Internship Management System Admin Login Form login.php sql injection

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from...

CVE-2026-93980

A SQL injection vulnerability in the code-projects Internship Management System 1.0 affects the Admin Login Form (/admin/login.php). Manipulating the Password argument allows a remote, unauthenticated attacker to inject SQL, potentially compromising confidentiality, integrity, and availability. T...

CVE-2026-93979 code-projects Internship Management System login.php sql injection

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

EUVD-2026-83722

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-93979

code-projects Internship Management System 1.0 is vulnerable to SQL injection in the file /employer/login.php through manipulation of the Password argument. The flaw allows a remote, unauthenticated attacker to execute arbitrary SQL, impacting confidentiality, integrity, and availability (CVSS 3....

CVE-2026-93978 code-projects Internship Management System login.php sql injection

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available...

CVE-2026-93978

code-projects Internship Management System 1.0 is affected by an SQL injection vulnerability in the file /login.php. Manipulation of the Password argument allows a remote, unauthenticated attacker to inject SQL commands, resulting in low impact on confidentiality, integrity, and availability (CVS...

CVE-2026-93978 code-projects Internship Management System login.php sql injection

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available...

EUVD-2026-83721

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available...

XSS2Shell-CVE-2026-64638

CVE-2026-64638 — XSS2Shell WordPress Pre-Auth Reflected XSS → Remote Code Execution Chain DOM Clobbering + Application Password Theft + REST API Plugin Activation = Full RCE ⚡ Overview CVE-2026-64638 is a critical pre-authentication Reflected XSS in WordPress wp-login.php. The vulnerability exist...

CVE-2026-64638-PoC-XSS2Shell-

XSS2Shell — WordPress Pre-Auth XSS → RCE Chain PoC CVE-2026-64638 · Reflected XSS on wp-login.php · CVSS 8.9 v4.0 · Patched in WordPress 7.0.3 ⚠️ AUTHORIZED TESTING ONLY. This tool is for security research and authorized penetration testing against systems you own or have explicit written...