5 matches found
CVE-2023-48433: Improper Neutralization of Special Elements used in an SQL Command
Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...
Sql injection
Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to a auth.php or b loginaction.php...
CVE-2010-0122
Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to a auth.php or b loginaction.php...
CVE-2010-0122: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to a auth.php or b loginaction.php...
S-Cms 1.1 Stable Insecure Cookie Handling / Mass Page Delete Vulns
Exploit for unknown platform in category web applications ================================================================== S-Cms 1.1 Stable Insecure Cookie Handling / Mass Page Delete Vulns ================================================================== 0x01 Informations: Name : S-Cms 1.1...