EUVD-2024-47710

Malicious code in bioql PyPI...

CVE-2024-51327

ProjectWorlds Travel Management System v1.0 is affected by a SQL Injection in loginform.php (fields: username, password) that can allow authentication bypass. The issue is documented across multiple sources (NVD/Red Hat/CVE list/CNNVD/PT-Security) with high-severity metrics (CVSSv3.1: AV:N/AC:L/P...

CVE-2024-51327: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields...

CVE-2024-51327

SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields...

CVE-2024-6653 code-projects Simple Task List Login loginForm.php sql injection

A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginForm.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The...

PT-2024-37780

Name of the Vulnerable Software and Affected Versions code-projects Simple Task List version 1.0 Description A critical issue has been found in the code-projects Simple Task List, affecting the file loginForm.php of the Login component. The manipulation of the username argument leads to SQL...

CVE-2024-6653: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginForm.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The...

CVE-2017-15958

D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php...

CVE-2017-15958

D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php...

PT-2017-14311

Name of the Vulnerable Software and Affected Versions D-Park Pro Domain Parking Script version 1.0 Description The issue allows SQL Injection via the username to "admin/loginform.php". Recommendations For D-Park Pro Domain Parking Script version 1.0, update the script to properly sanitize user...

CVE-2017-15958: Improper Neutralization of Special Elements used in an SQL Command

D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php...

Unfixed XSS vulnerability at www.classadsuk.com

Security researcher BackDoor, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting www.classadsuk.com, which at the time of submission ranked 3167999 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is...

[Full-disclosure] Confixx Index.PHP SQL Injection Vulnerability (Exploit - not new vuln)

Here is more information on the confixx vuln released by LoK Crew. Sorry for the poor quality of this posting, I was short of time. Product: ^^^^^^^ Confixx is a comprehensive control panel that provides the best value, proven quality, fully developed feature set and quality support. The software...