CVE-2010-10010 Stars Alliance PsychoStats login.php cross site scripting

A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a. This affects an unknown part of the file upload/admin/login.php. The manipulation of the argument ref leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to...

CVE-2010-10010

CVE-2010-10010 affects Stars Alliance PsychoStats versions up to 3.2.2a. The vulnerability is an XSS flaw arising from manipulation of the ref parameter in an unknown section of file upload/admin/login.php. It can be exploited remotely. A fix is available in PsychoStats 3.2.2b (patch identifier 5...

CVE-2023-3008

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2023-3008 ningzichun Student Management System login.php sql injection

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

Sql injection

SourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employeegatepass/classes/Login.php...

CVE-2023-31752

SourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employeegatepass/classes/Login.php...

CVE-2020-21038

Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...

CVE-2020-21038

Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...

Open redirect

Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...

PT-2023-11571 · Typecho · Typecho

Name of the Vulnerable Software and Affected Versions: Typecho versions 1.1 through 17.10.30-release Description: The issue is related to an open redirect vulnerability. It can be exploited via the referer parameter to the "Login.php" endpoint. Recommendations: For Typecho versions 1.1 through...

CVE-2020-21038

Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php...

typecho 输入验证错误漏洞

typecho is a PHP blogging platform for typecho individual developers. It is simple and powerful. A security vulnerability exists in typecho version 1.1-17.10.30-release, which stems from a redirection vulnerability via the referer parameter of Login.php...

CVE-2020-21038

Open redirect vulnerability (CVE-2020-21038) in Typecho 1.1-17.10.30-release, exploitable via the referer parameter to Login.php. Root cause: improper handling of referer input leads to redirection to arbitrary URLs. Affected software/version: Typecho 1.1 through 17.10.30-release. Impact: potenti...

CVE-2023-2205 Campcodes Retro Basketball Shoes Online Store login.php sql injection

A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...

Campcodes Online Traffic Offense Management System SQL Injection Vulnerability (CNVD-2023-29406)

Campcodes Online Traffic Offense Management System is a web-based traffic offense management system. A SQL injection vulnerability exists in Campcodes Online Traffic Offense Management System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the paramet...

CVE-2023-2073 Campcodes Online Traffic Offense Management System Login.php sql injection

A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Login.php. The manipulation of the argument password leads to sql injection. The attack can be...

CVE-2023-2057

A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...

CVE-2023-2057 EyouCms New Picture cross site scripting

A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...

CVE-2023-29623

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...

EyouCms 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is a set of open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A cross-site scripting vulnerability exists in EyouCms version 1.5.4, which originates from a problem with the file...