Malicious code in @zalastax/nolb-passw (npm)

The package @zalastax/nolb-passw was found to contain malicious code...

MAL-2025-13085 Malicious code in @zalastax/nolb-passw (npm)

The package @zalastax/nolb-passw was found to contain malicious code...

Sql injection

SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information...

PT-2012-2945

Name of the Vulnerable Software and Affected Versions ICloudCenter ICTimeAttendance version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the passw parameter in the "checklogin.aspx" endpoint. Recommendations For ICloudCenter...

CVE-2012-0913: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information...