2586 matches found
Sql injection
Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code...
CVE-2020-25006
The CVE-2020-25006 entry concerns Heybbs v1.2, with a SQL injection vulnerability in login.php via the username parameter that may allow a remote attacker to execute arbitrary code. The affected component is the login logic in Heybbs 1.2; underlying cause is a SQL injection flaw in user authentic...
CVE-2020-25006
Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code...
PT-2020-15885
Name of the Vulnerable Software and Affected Versions Heybbs version 1.2 Description The issue is related to a SQL injection vulnerability in the login.php file, specifically via the username parameter. This may allow a remote attacker to execute arbitrary code. Recommendations For Heybbs version...
CVE-2020-25006: Improper Neutralization of Special Elements used in an SQL Command
Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code...
elaniin CMS - Authentication Bypass Vulnerability
Exploit for php platform in category web applications Exploit Title: elaniin CMS 1.0 - Authentication Bypass Exploit Author: BKpatron Vendor Homepage:https://elaniin.com/ Software Link:https://github.com/elaniin/CMS/archive/master.zip Version: v1.0 Tested on: Win 10 CVE: N/A Vulnerability: Attack...
PT-2020-14694
Name of the Vulnerable Software and Affected Versions D-Link DAP-1522 devices versions 1.4x through 1.10b04Beta01 Description An authentication-bypass issue allows unauthorized users to access certain pages directly. This is due to the checking of the NO NEED AUTH value. If NO NEED AUTH is set to...
PT-2020-5380
Name of the Vulnerable Software and Affected Versions MK-AUTH version 19.01 Description The issue concerns an authentication bypass in the web login functionality. This is due to guessable credentials for the admin access to the admin/executar login.php endpoint. The vulnerability is related to...
PT-2020-5378
Name of the Vulnerable Software and Affected Versions Mk-Auth version 19.01 Description The issue is related to a lack of protection against SQL structure manipulation in the central/executar login.php component of the Mk-Auth authentication software. This allows a remote attacker to execute...
PT-2020-14099
Name of the Vulnerable Software and Affected Versions webTareas version 2.0p8 Description The issue concerns a Reflected Cross Site Scripting XSS vulnerability. This occurs via the query string in the loginForm within the general/login.php webpage. Recommendations For webTareas version 2.0p8,...
CVE-2020-14973: Improper Neutralization of Input During Web Page Generation
The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting XSS vulnerability via the query string...
CVE-2020-12273
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...
CVE-2020-12273
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...
PT-2020-13086
Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Description A crafted viewer parameter in the login.php endpoint exposes cleartext credentials. Recommendations For TestLink version 1.9.20, avoid using the viewer parameter in the login.php endpoint until the issue is...
CVE-2020-12273: Missing Encryption of Sensitive Data
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...
CVE-2020-11545: Improper Neutralization of Special Elements used in an SQL Command
Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...
PT-2020-6797
Name of the Vulnerable Software and Affected Versions Project Worlds Official Car Rental System 1 Description The issue is related to multiple SQL injection problems. Specifically, it affects the email and parameters in account.php, uname and pass parameters in login.php, and the id parameter in...
CVE-2019-19484
Open redirect via parameter ‘p’ in login.php in Centreon 19.04.4 and below allows an attacker to craft a payload and execute unintended behavior...
CVE-2019-19484
CVE-2019-19484 affects Centreon prior to version 19.04.5 (19.04.4 and below) and is due to an open redirect in login.php via the p URL parameter. An attacker can craft a payload to trigger unintended behavior by redirecting to an arbitrary URL. The linked records (including Red Hat advisory refer...