Lucene search
+L

1460 matches found

NVD
NVD
added 2023/03/25 6:15 p.m.20 views

CVE-2016-15030

A vulnerability classified as problematic has been found in Arno0x TwoFactorAuth. This affects an unknown part of the file login/login.php. The manipulation of the argument from leads to open redirect. It is possible to initiate the attack remotely. This product does not use versioning. This is w...

6.1CVSS4.7AI score0.00429EPSS
SaveExploits0References4
Prion
Prion
added 2023/03/25 6:15 p.m.17 views

Open redirect

A vulnerability classified as problematic has been found in Arno0x TwoFactorAuth. This affects an unknown part of the file login/login.php. The manipulation of the argument from leads to open redirect. It is possible to initiate the attack remotely. This product does not use versioning. This is w...

5.8CVSS7AI score0.00429EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2023/03/25 5:31 p.m.32 views

CVE-2016-15030 Arno0x TwoFactorAuth login.php redirect

A vulnerability classified as problematic has been found in Arno0x TwoFactorAuth. This affects an unknown part of the file login/login.php. The manipulation of the argument from leads to open redirect. It is possible to initiate the attack remotely. This product does not use versioning. This is w...

4CVSS6.3AI score0.00429EPSS
SaveExploits0References4
NVD
NVD
added 2023/03/20 10:15 a.m.44 views

CVE-2023-1506

A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack...

8.1CVSS6.7AI score0.00506EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/20 10:15 a.m.30 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack...

5.1CVSS9.7AI score0.00506EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/20 9:31 a.m.45 views

CVE-2023-1506 SourceCodester E-Commerce System login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack...

5.6CVSS8.6AI score0.00506EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/18 9:15 a.m.9 views

CVE-2023-1480

A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument un leads to sql injection...

9.8CVSS5.7AI score0.00738EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/18 9:15 a.m.16 views

Sql injection

A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument un leads to sql injection...

6.5CVSS9.7AI score0.00738EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/18 9:00 a.m.23 views

CVE-2023-1480 SourceCodester Monitoring of Students Cyber Accounts System POST Parameter login.php sql injection

A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument un leads to sql injection...

6.5CVSS10AI score0.00738EPSS
SaveExploits1References3
CVE
CVE
added 2023/03/18 9:00 a.m.56 views

CVE-2023-1480

CVE-2023-1480 affects SourceCodester Monitoring of Students Cyber Accounts System v1.0, specifically the login.php file in the POST Parameter Handler. The vulnerability arises from manipulation of the un parameter, which leads to SQL injection. This issue can be exploited remotely; public exploit...

9.8CVSS8.4AI score0.00738EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2023/03/13 9:15 a.m.28 views

CVE-2023-1368

A vulnerability was found in XHCMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component POST Parameter Handler. The manipulation of the argument user leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS8.2AI score0.008EPSS
SaveExploits1References3
CVE
CVE
added 2023/03/13 8:31 a.m.63 views

CVE-2023-1368

CVE-2023-1368 concerns XHCMS 1.0, specifically the POST Parameter Handler’s login.php. The vulnerability arises from unknown code in login.php where manipulating the POST parameter user enables SQL injection. Exploitation can be performed remotely, and multiple sources describe the issue as criti...

9.8CVSS8.9AI score0.008EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/13 8:31 a.m.43 views

CVE-2023-1368 XHCMS POST Parameter login.php sql injection

A vulnerability was found in XHCMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component POST Parameter Handler. The manipulation of the argument user leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS10AI score0.008EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/03/12 7:31 a.m.25 views

CVE-2023-1358 SourceCodester Gadget Works Online Ordering System POST Parameter login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknown part of the file /philosophy/admin/login.php of the component POST Parameter Handler. The manipulation of the argument useremail leads to sql injection. ...

6.5CVSS10AI score0.00726EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/03/11 5:41 p.m.28 views

CVE-2023-1352 SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System login.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. This issue affects some unknown processing of the file /admin/login.php. The manipulation of the argument txtusername/txtpassword leads to...

5.6CVSS8.6AI score0.00862EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/03/09 2:39 p.m.38 views

CVE-2023-1294 SourceCodester File Tracker Manager System POST Parameter login.php sql injection

A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown function of the file /filemanager/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is...

7.5CVSS10AI score0.00823EPSS
SaveExploits1References3
NVD
NVD
added 2023/03/07 3:15 p.m.30 views

CVE-2023-1253

A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS8.1AI score0.008EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/07 3:15 p.m.31 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...

7.5CVSS9.7AI score0.008EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/07 2:54 p.m.40 views

CVE-2023-1253 SourceCodester Health Center Patient Record Management System login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...

7.5CVSS10AI score0.008EPSS
SaveExploits1References3
Prion
Prion
added 2023/02/28 12:15 a.m.19 views

Sql injection

A vulnerability, which was classified as critical, was found in OpenCycleCompass server-php. Affected is an unknown function of the file api1/login.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. This product is using a rolling...

7.5CVSS8AI score0.00685EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder