320 matches found
CVE-2021-42668
cve-2021-42668 CVE-2021-42668 - уязвимость SQL-инъекции в системе онлайн-портала инженеров. Техническое описание: Уязвимость SQL-инъекции существует в онлайн-портале инженеров. Злоумышленник может использовать уязвимый параметр "id" на веб-странице "myclassmates.php" для манипуляции выполняемым...
CVE-2021-42670
CVE-2021-42670 CVE-2021-42670 - Vulnérabilité d'injection SQL dans le système de portail en ligne des ingénieurs. Description technique : Une vulnérabilité d'injection SQL existe dans le portail en ligne des ingénieurs. Un attaquant peut exploiter le paramètre vulnérable "id" dans la page web...
CVE-2021-42671
CVE-2021-42671 CVE-2021-42671 - Уязвимость нарушения контроля доступа в системе онлайн-портала инженеров. Техническое описание: Существует уязвимость нарушения контроля доступа в онлайн-портале инженеров. Злоумышленник может использовать эту уязвимость для обхода контроля доступа и получения...
CVE-2021-42669
CVE-2021-42669 CVE-2021-42669 - Exécution de code à distance via une vulnérabilité de téléchargement de fichier sans restriction dans le système de portail en ligne des ingénieurs. Description technique : Une vulnérabilité de téléchargement de fichier sans restriction existe dans le système...
CVE-2021-42664
CVE-2021-42664 CVE-2021-42664 - Gespeicherte Cross-Site-Scripting-Schwachstelle im Engineers Online-Portal-System. Technische Beschreibung: Eine gespeicherte XSS-Schwachstelle existiert im Engineers Online-Portal-System. Ein Angreifer kann diese Schwachstelle ausnutzen, um javascript im Namen des...
CVE-2021-42665
CVE-2021-42665 CVE-2021-42665 - Vulnerabilità di bypass dell'autenticazione tramite SQL Injection nel sistema del portale online degli ingegneri. Descrizione tecnica: Una vulnerabilità di SQL Injection esiste nel modulo di login del Portale Online degli Ingegneri che può permettere a un attaccant...
CVE-2021-42666
CVE-2021-42666 CVE-2021-42666 - Vulnerabilidade de SQL Injection no sistema de portal online de Engenheiros. Descrição técnica: Existe uma vulnerabilidade de SQL Injection no sistema de portal online de Engenheiros. Um atacante pode explorar o parâmetro "id" vulnerável na página web...
CVE-2026-36236
SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...
EUVD-2026-21392
SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...
SourceCodester Engineers Online Portal 安全漏洞
SourceCodester Engineers Online Portal is an online portal for engineers, developed by SourceCodester as open source. Version 1.0 of the SourceCodester Engineers Online Portal contains a security vulnerability. This vulnerability stems from the newpassword parameter in the updatepassword.php file...
CVE-2026-36236
SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...
PT-2026-31931
SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update password.php via the new password parameter...
CVE-2026-5558 PHPGurukul PHPGurukul Online Shopping Portal Project Parameter pending-orders.php sql injection
A flaw has been found in PHPGurukul PHPGurukul Online Shopping Portal Project up to 2.1. Impacted is an unknown function of the file /pending-orders.php of the component Parameter Handler. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely...
Password Managers Share a Hidden Weakness
Plus: The cybersecurity community grapples with Epstein files revelations, the US State Department plans an online anti-censorship “portal” for the world, and more...
CVE-2025-65647
Insecure Direct Object Reference IDOR in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter...
EUVD-2023-57601
Malicious code in bioql PyPI...
EUVD-2022-29145
Malicious code in bioql PyPI...
EUVD-2024-16146
Malicious code in bioql PyPI...