CVE-2020-19281: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field...

PT-2021-10321

Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A stored cross-site scripting XSS issue in the "/manage/loginusername" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field. This enables the executi...

CVE-2015-8298: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow remote attackers to execute arbitrary SQL commands via the 1 loginpassword, 2 loginusername, 3 zusatzlicher, or 4 groupid parameter to index.htm, or the 5 rxtec cookie to index.htm...

PT-2018-4439

Name of the Vulnerable Software and Affected Versions RXTEC RXAdmin UPDATE 06 / 2012 Description The issue concerns SQL injection vulnerabilities in the login page. Remote attackers can execute arbitrary SQL commands by manipulating specific parameters to the index.htm page, including the...

CVE-2017-16902

Vonage VDV-23 115 devices running firmware 3.2.11-0.9.40 are affected by CVE-2017-16902. A long string in loginUsername or loginPassword sent to goform/login can trigger a crash and router reboot, effectively a denial-of-service. CNVD-2017-37697 corroborates the reboot via a long login field; 133...

PT-2017-14629

Name of the Vulnerable Software and Affected Versions Vonage VDV-23 115 version 3.2.11-0.9.40 Description The issue occurs when a long string of characters is sent in the loginPassword and/or loginUsername field to the "goform/login" endpoint, causing the router to reboot. Recommendations For...

CVE-2017-16902: Improper Restriction of Operations within the Bounds of a Memory Buffer

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

PT-2014-2684

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 2.3.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the loginUserName parameter to the "application/login/login.html" endpoint, the my account login...

CVE-2008-6911: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the authenticateUser function in includes/authentication.inc.php in BrewBlogger BB 2.1.0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the loginUsername parameter to includes/logincheck.inc.php. NOTE: some of these...

CVE-2005-3423

Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter or 2 cookies to a subdreamer.php, b ipb2.php, c phpbb2.php, d vbulletin2.php, and e vbulletin3.php...

CVE-2005-3423: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter or 2 cookies to a subdreamer.php, b ipb2.php, c phpbb2.php, d vbulletin2.php, and e vbulletin3.php...