PT-2022-13644

Name of the Vulnerable Software and Affected Versions SourceCodester Microfinance Management System version 1.0 Description A critical issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1' leads to sql injection. The...

PT-2022-13638

Name of the Vulnerable Software and Affected Versions Automatic Question Paper Generator System version 1.0 Description A problematic issue has been found, affecting the My Account Page component, specifically the file /aqpg/users/login.php. The manipulation of the First Name, Middle Name, and La...

PT-2022-11896

Name of the Vulnerable Software and Affected Versions Spotweb versions 1.5.1 and below Description The issue is related to a Cross Site Scripting XSS vulnerability in the SpotPage login.php file. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the...

PT-2022-17330

Name of the Vulnerable Software and Affected Versions Online Banking System version 1.0 Description The Online Banking System contains a SQL injection issue via the staff login.php file. This allows for potential exploitation. Recommendations For Online Banking System version 1.0, consider...

PT-2022-16748

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue allows for SQL Injection through the /admin/login.php endpoint. An attacker can exploit this to log in to the background using SQL injection statements. Recommendations For Luocms version 2.0, consider...

CVE-2022-24600: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements...

CVE-2022-25013

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...

Cross site scripting

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...

CVE-2022-25013

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...

CVE-2022-25013

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...

CVE-2022-25013

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...

CVE-2022-25013

Ice Hrm 30.0.0.OS is vulnerable to multiple reflected XSS in login.php via the key and fm parameters. The CNVD entry cites lack of checksum filtering of user-supplied data and output data in these parameters as the root cause; other sources describe the issue as reflected XSS without detailing a ...

PT-2022-17046

Name of the Vulnerable Software and Affected Versions Ice Hrm version 30.0.0.OS Description The issue is related to multiple reflected cross-site scripting XSS vulnerabilities. These vulnerabilities are exploited via the key and fm parameters in the component login.php. Recommendations For Ice Hr...

CVE-2022-25013: Improper Neutralization of Input During Web Page Generation

Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...

CVE-2022-24223

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

Sql injection

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

CVE-2022-24223

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

CVE-2022-24223

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

PT-2022-11863

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description A SQL Injection issue exists via the username field in the "login.php" file. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client...

CVE-2022-24223: Improper Neutralization of Special Elements used in an SQL Command

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...