Fuel CMS Brute Force Hacking Vulnerability

FUEL CMS is a CodeIgniter-based content management system. A brute-force cracking vulnerability exists in fuel/modules/fuel/controllers/Login.php in Fuel CMS version 1.5.0. An attacker can use this vulnerability to brute-force the administrator's email address...

CVE-2021-38725

Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...

CVE-2021-38725

Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...

CVE-2021-38721

FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...

Cross site request forgery (csrf)

FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...

CVE-2021-38725

Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...

CVE-2021-38721

FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...

CVE-2021-38725

Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...

CVE-2021-38725

CVE-2021-38725 — Fuel CMS 1.5.0 brute-force vulnerability . Affected software is Fuel CMS 1.5.0, with the issue located in the login controller file: fuel/modules/fuel/controllers/Login.php. The connected sources explicitly describe a brute-force vulnerability, and CNVD notes that an attacker can...

CVE-2021-38725

Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...

CVE-2021-38725: Improper Restriction of Excessive Authentication Attempts

Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php...

CVE-2021-38721: Cross-Site Request Forgery (CSRF)

FUEL CMS 1.5.0 login.php contains a cross-site request forgery CSRF vulnerability...

PT-2021-22277

Name of the Vulnerable Software and Affected Versions Fuel CMS version 1.5.0 Description The issue is related to a brute force vulnerability. It is located in the fuel/modules/fuel/controllers/Login.php file. Recommendations For Fuel CMS version 1.5.0, consider temporarily disabling the login...

CVE-2021-38840

SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...

CVE-2021-38840

SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...

CVE-2021-38840: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...

PT-2021-22295

Name of the Vulnerable Software and Affected Versions Simple Water Refilling Station Management System version 1.0 Description SQL Injection can occur via the username parameter in the water refilling/classes/Login.php file. This issue allows for potential SQL injection attacks. Recommendations F...

eLearning V2(by: oretnom23) is vulnerable from remote SQL-Injection-Bypass-Authentication

Description: The eLearning V2by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication in 3 accounts of the system admin, Faculty & Student in app /elearning/classes/Login.php. remote SQL-Injection-Bypass-Authentication: . The parameter username, facultyid, and studentid from th...

Online Leave Management System 1.0 SQL Injection

Exploit Title: OLMS - PHP by: oretnom23 v1.0 SQL-Injection-Bypass-Authentication in /leavesystem/classes/Login.php. Author: nu11secur1ty Testing and Debugging: nu11secur1ty Date: 08.31.2021 Vendor: https://www.sourcecodester.com/php/14910/online-leave-management-system-php-free-source-code.html...

SES-by-oretnom23 -v1.0-SQL-Injection-bypass-Login

The SES-byoretnom23 -v1.0 is vulnerable in the application /elearning/classes/Login.php which is called from /elearning/dist/js/script.js app. The parameter username from the login form is not protected correctly and there is no security and escaping from malicious payloads. When the user is...