CVE-2024-31678: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file...

CVE-2024-31678

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file...

CVE-2024-3534

CVE-2024-3534 affects Campcodes Church Management System 1.0. The issue is a SQL injection in login.php via the password parameter, enabling remote exploitation. Several connected sources confirm a critical risk (network vector, low attack complexity, no privileges required) and that the vulnerab...

CVE-2024-3534 Campcodes Church Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The explo...

CVE-2024-3534: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The explo...

CVE-2024-3439

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2024-3439 SourceCodester Prison Management System login.php sql injection

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2024-3438

CVE-2024-3438 affects SourceCodester Prison Management System 1.0. The vulnerability exists in the /Admin/login.php file, where input handling enables SQL injection. Exploitation is possible remotely, and public disclosure is noted. Multiple connected documents corroborate the issue and describe ...

CVE-2024-3438: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/login.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

Prison Management System SQL注入漏洞

Prison Management System is a prison management system developed by Carlo Montero, an individual developer. A SQL injection vulnerability exists in SourceCodester Prison Management System version 1.0, which originates in the /Account/login.php file and can be exploited for SQL injection attacks...

CVE-2024-3439: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

PT-2024-25850

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A critical issue has been found, allowing for sql injection through an unknown function of the file /Account/login.php. This can be exploited remotely. The issue has been publicly...

CVE-2024-3431

A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of the file /login.php?m=admin&c=Field&a=channeledit of the component Backend. The manipulation of the argument channelid leads to deserialization. The attack can be initiated...

CVE-2024-3431 EyouCMS Backend deserialization

A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of the file /login.php?m=admin&c=Field&a=channeledit of the component Backend. The manipulation of the argument channelid leads to deserialization. The attack can be initiated...

CVE-2024-28741

Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2024-3359 SourceCodester Online Library System login.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of the file admin/login.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2024-28741: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2024-3359: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of the file admin/login.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2024-28741

Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2024-3349 SourceCodester Aplaya Beach Resort Online Reservation System login.php sql injection

A vulnerability classified as critical was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/login.php. The manipulation of the argument email leads to sql injection. The attack can be launched...