2612 matches found
Design/Logic Flaw
phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter...
CVE-2020-27163
phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter...
CVE-2020-27163
phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter...
CVE-2020-27163: Improper Neutralization of Input During Web Page Generation
phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter...
PT-2020-16644
Name of the Vulnerable Software and Affected Versions phpRedisAdmin versions prior to 1.13.2 Description The issue allows for XSS via the username parameter in the "login.php" endpoint. This affects a significant number of devices, but the exact count is not specified. There is no information...
CVE-2020-25006
Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code...
Sql injection
Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code...
CVE-2020-25006
Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code...
CVE-2020-25006
The CVE-2020-25006 entry concerns Heybbs v1.2, with a SQL injection vulnerability in login.php via the username parameter that may allow a remote attacker to execute arbitrary code. The affected component is the login logic in Heybbs 1.2; underlying cause is a SQL injection flaw in user authentic...
PT-2020-15885
Name of the Vulnerable Software and Affected Versions Heybbs version 1.2 Description The issue is related to a SQL injection vulnerability in the login.php file, specifically via the username parameter. This may allow a remote attacker to execute arbitrary code. Recommendations For Heybbs version...
CVE-2020-25006: Improper Neutralization of Special Elements used in an SQL Command
Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code...
elaniin CMS - Authentication Bypass Vulnerability
Exploit for php platform in category web applications Exploit Title: elaniin CMS 1.0 - Authentication Bypass Exploit Author: BKpatron Vendor Homepage:https://elaniin.com/ Software Link:https://github.com/elaniin/CMS/archive/master.zip Version: v1.0 Tested on: Win 10 CVE: N/A Vulnerability: Attack...
PT-2020-14694
Name of the Vulnerable Software and Affected Versions D-Link DAP-1522 devices versions 1.4x through 1.10b04Beta01 Description An authentication-bypass issue allows unauthorized users to access certain pages directly. This is due to the checking of the NO NEED AUTH value. If NO NEED AUTH is set to...
PT-2020-5378
Name of the Vulnerable Software and Affected Versions Mk-Auth version 19.01 Description The issue is related to a lack of protection against SQL structure manipulation in the central/executar login.php component of the Mk-Auth authentication software. This allows a remote attacker to execute...
PT-2020-5380
Name of the Vulnerable Software and Affected Versions MK-AUTH version 19.01 Description The issue concerns an authentication bypass in the web login functionality. This is due to guessable credentials for the admin access to the admin/executar login.php endpoint. The vulnerability is related to...
CVE-2020-14973: Improper Neutralization of Input During Web Page Generation
The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting XSS vulnerability via the query string...
PT-2020-14099
Name of the Vulnerable Software and Affected Versions webTareas version 2.0p8 Description The issue concerns a Reflected Cross Site Scripting XSS vulnerability. This occurs via the query string in the loginForm within the general/login.php webpage. Recommendations For webTareas version 2.0p8,...
CVE-2020-12273
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...