2584 matches found
CVE-2022-24131: Improper Neutralization of Input During Web Page Generation
DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting XSS through /admin/login.php in the background, which will lead to JavaScript code execution...
CVE-2022-1076: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...
PT-2022-13638
Name of the Vulnerable Software and Affected Versions Automatic Question Paper Generator System version 1.0 Description A problematic issue has been found, affecting the My Account Page component, specifically the file /aqpg/users/login.php. The manipulation of the First Name, Middle Name, and La...
PT-2022-13644
Name of the Vulnerable Software and Affected Versions SourceCodester Microfinance Management System version 1.0 Description A critical issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1' leads to sql injection. The...
CVE-2022-1082: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...
PT-2022-11896
Name of the Vulnerable Software and Affected Versions Spotweb versions 1.5.1 and below Description The issue is related to a Cross Site Scripting XSS vulnerability in the SpotPage login.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the...
PT-2022-17330
Name of the Vulnerable Software and Affected Versions Online Banking System version 1.0 Description The Online Banking System contains a SQL injection issue via the staff login.php file. This allows for potential exploitation. Recommendations For Online Banking System version 1.0, consider...
CVE-2022-24600: Improper Neutralization of Special Elements used in an SQL Command
Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements...
PT-2022-16748
Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue allows for SQL Injection through the /admin/login.php endpoint. An attacker can exploit this to log in to the background using SQL injection statements. Recommendations For Luocms version 2.0, consider...
CVE-2022-25013
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
Cross site scripting
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-25013
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-25013
Ice Hrm 30.0.0.OS is vulnerable to multiple reflected XSS in login.php via the key and fm parameters. The CNVD entry cites lack of checksum filtering of user-supplied data and output data in these parameters as the root cause; other sources describe the issue as reflected XSS without detailing a ...
CVE-2022-25013
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-25013
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
PT-2022-17046
Name of the Vulnerable Software and Affected Versions Ice Hrm version 30.0.0.OS Description The issue is related to multiple reflected cross-site scripting XSS vulnerabilities. These vulnerabilities are exploited via the key and fm parameters in the component login.php. Recommendations For Ice Hr...
CVE-2022-25013: Improper Neutralization of Input During Web Page Generation
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
CVE-2022-24223
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...