PT-2022-14157

Name of the Vulnerable Software and Affected Versions Home Clean Services Management System version 1.0 Description A critical vulnerability was found in the Home Clean Services Management System, affecting the file login.php. The manipulation of the email argument with a specific input leads to...

CVE-2022-28531

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...

PT-2022-19069

Name of the Vulnerable Software and Affected Versions Sourcecodester Covid-19 Directory on Vaccination System version 1.0 Description The system is susceptible to SQL Injection attacks through the txtusername field, also known as the Username field, located in the admin/login.php endpoint. This...

CVE-2022-28531: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...

CVE-2022-28060

SQL Injection vulnerability in Victor CMS v1.0, via the username parameter to /includes/login.php...

CVE-2022-28060: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Victor CMS v1.0, via the username parameter to /includes/login.php...

PT-2022-18787

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue is related to a SQL Injection vulnerability. It can be exploited via the user name parameter to the "/includes/login.php" API endpoint. Recommendations For Victor CMS version 1.0, consider restricti...

bbPress Cross-site Scripting (XSS) vulnerability

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter...

PT-2022-18737

Name of the Vulnerable Software and Affected Versions Online Banking System in PHP version 1 Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/staff login.php" endpoint via the Staff ID and Staff Password parameters. Recommendations...

Client management SQL injection vulnerability

Simple Client Management System is a simple web-based application that provides an online platform to manage company customer invoices.Simple Client Management System 1.0 is vulnerable to a SQL injection vulnerability that could be caused by a password parameter in Login.php. No detailed...

CVE-2021-43506

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

Sql injection

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

CVE-2021-43506

The vulnerability CVE-2021-43506 affects Sourcecodester Simple Client Management System 1.0, where an SQL Injection can be triggered via the password parameter in Login.php. The root cause is improper input handling leading to unauthorized access or data exposure. Multiple sources (NVD and Red Ha...

Patient Appointment Scheduler System SQL Injection Vulnerability

Patient Appointment Scheduler System is a patient appointment scheduling system project. It provides an online platform for clinic patients or potential patients to schedule appointments with physicians. patient Appointment Scheduler System version 1.0 contains a SQL injection vulnerability that...

CVE-2021-43506: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

PT-2022-11861

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description An SQL Injection issue exists via the password parameter in Login.php. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client Management...

CVE-2022-24131: Improper Neutralization of Input During Web Page Generation

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting XSS through /admin/login.php in the background, which will lead to JavaScript code execution...

PT-2022-16484

Name of the Vulnerable Software and Affected Versions DouPHP version 1.6 Release 20220121 Description The issue affects the background of DouPHP through the "/admin/login.php" API endpoint, allowing for Cross Site Scripting XSS attacks, which can lead to JavaScript code execution. Recommendations...

CVE-2022-1076: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...

CVE-2022-1082: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...