3 matches found
CVE-2026-84307
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5, packages/panels/src/Auth/Pages/Login.php presents the multi-factor authentication challenge before evaluating canAccessPanel. For an account that canAccessPanel denies,...
CVE-2009-1487: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the loginuser aka username parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-2224: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 sazsettingssitedir parameter to layouts/default/header.saz.php and the 2 sazsettingssiteurl parameter to...