CVE-2022-1838: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Home Clean Services Management System 1.0. This affects an unknown part of admin/login.php. The manipulation of the argument username with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP5JPeh//AND//'frfq%'='frfq leads to sql...

CVE-2022-1839: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...

PT-2022-14157

Name of the Vulnerable Software and Affected Versions Home Clean Services Management System version 1.0 Description A critical vulnerability was found in the Home Clean Services Management System, affecting the file login.php. The manipulation of the email argument with a specific input leads to...

PT-2022-14156

Name of the Vulnerable Software and Affected Versions Home Clean Services Management System version 1.0 Description A critical issue has been discovered, affecting an unknown part of the admin/login.php component. The manipulation of the username argument with a specific input leads to SQL...

CVE-2022-28531

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...

CVE-2022-28531: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...

PT-2022-19069

Name of the Vulnerable Software and Affected Versions Sourcecodester Covid-19 Directory on Vaccination System version 1.0 Description The system is susceptible to SQL Injection attacks through the txtusername field, also known as the Username field, located in the admin/login.php endpoint. This...

CVE-2022-28060

SQL Injection vulnerability in Victor CMS v1.0, via the username parameter to /includes/login.php...

CVE-2022-28060: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Victor CMS v1.0, via the username parameter to /includes/login.php...

PT-2022-18787

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue is related to a SQL Injection vulnerability. It can be exploited via the user name parameter to the "/includes/login.php" API endpoint. Recommendations For Victor CMS version 1.0, consider restricti...

bbPress Cross-site Scripting (XSS) vulnerability

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter...

PT-2022-18737

Name of the Vulnerable Software and Affected Versions Online Banking System in PHP version 1 Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/staff login.php" endpoint via the Staff ID and Staff Password parameters. Recommendations...

Client management SQL injection vulnerability

Simple Client Management System is a simple web-based application that provides an online platform to manage company customer invoices.Simple Client Management System 1.0 is vulnerable to a SQL injection vulnerability that could be caused by a password parameter in Login.php. No detailed...

CVE-2021-43506

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

Sql injection

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

CVE-2021-43506

The vulnerability CVE-2021-43506 affects Sourcecodester Simple Client Management System 1.0, where an SQL Injection can be triggered via the password parameter in Login.php. The root cause is improper input handling leading to unauthorized access or data exposure. Multiple sources (NVD and Red Ha...

CVE-2021-43506: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

Patient Appointment Scheduler System SQL Injection Vulnerability

Patient Appointment Scheduler System is a patient appointment scheduling system project. It provides an online platform for clinic patients or potential patients to schedule appointments with physicians. patient Appointment Scheduler System version 1.0 contains a SQL injection vulnerability that...

PT-2022-11861

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description An SQL Injection issue exists via the password parameter in Login.php. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client Management...

PT-2022-16484

Name of the Vulnerable Software and Affected Versions DouPHP version 1.6 Release 20220121 Description The issue affects the background of DouPHP through the "/admin/login.php" API endpoint, allowing for Cross Site Scripting XSS attacks, which can lead to JavaScript code execution. Recommendations...