EUVD-2024-47710

Malicious code in bioql PyPI...

CVE-2024-51327

SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields...

CVE-2024-51327

ProjectWorlds Travel Management System v1.0 is affected by a SQL Injection in loginform.php (fields: username, password) that can allow authentication bypass. The issue is documented across multiple sources (NVD/Red Hat/CVE list/CNNVD/PT-Security) with high-severity metrics (CVSSv3.1: AV:N/AC:L/P...

CVE-2024-6653 code-projects Simple Task List Login loginForm.php sql injection

A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginForm.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The...

CVE-2017-15958

D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php...

CVE-2017-15958

D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php...

Unfixed XSS vulnerability at www.classadsuk.com

Security researcher BackDoor, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting www.classadsuk.com, which at the time of submission ranked 3167999 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is...

[Full-disclosure] Confixx Index.PHP SQL Injection Vulnerability (Exploit - not new vuln)

Here is more information on the confixx vuln released by LoK Crew. Sorry for the poor quality of this posting, I was short of time. Product: ^^^^^^^ Confixx is a comprehensive control panel that provides the best value, proven quality, fully developed feature set and quality support. The software...