SourceCodester Accounts Manager App SQL注入漏洞

SourceCodester Accounts Manager App is a web-based application from SourceCodester, Inc. It is designed to manage online accounts efficiently and securely. A SQL injection vulnerability exists in SourceCodester Accounts Manager App version 1.0, which stems from the parameter account in the file...

CVE-2024-36108 Multiple Broken Function-Level Authorization vulnerabilities in casgate

casgate is an Open Source Identity and Access Management system. In affected versions casgate allows remote unauthenticated attacker to obtain sensitive information via GET request to an API endpoint. This issue has been addressed in PR 201 which is pending merge. An attacker could use id paramet...

07FLY CRM SQL Injection Vulnerability

07FLY CRM is an OA office system of China Zero Takeoff 07FLY. A SQL injection vulnerability exists in 07FLY CRM version V2, which originates from a SQL injection vulnerability in the parameter account of the component Administrator Login Page...