986 matches found
HMS-PHP 安全漏洞
HMS-PHP is a CSE309 IUB final web application project by the individual developer Pingkon Augustine Rozario. A security vulnerability exists in HMS-PHP that stems from some unknown processing in the file admin/adminlogin.php being affected, where manipulation of the parameter uname/pass can lead ...
JetBrains TeamCity 日志信息泄露漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis, and build issue analysis reports. A log information disclosure vulnerability exists in JetBrains TeamCit...
Simple Cold Storage Management System 跨站请求伪造漏洞
Simple Cold Storage Management System is a Simple Cold Storage Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Cold Storage Management System version 1.0, which stems from a change in the operation parameter password that could lead to cross-site...
CVE-2022-38637
Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page...
Hospital Management System SQL注入漏洞
The Hospital Management System HMS is a computer system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A SQL injection vulnerability exists in Hospital Management System v1.0, which originates from a security issue with the Username and...
CVE-2022-36259
A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc...
Online Driving School SQL注入漏洞
Online Driving School is an online driving school program by the individual developers at Codeprojects. Online Driving School suffers from a SQL injection vulnerability that originates in an unknown section of login.php, where manipulation of the parameters username and password can result in a s...
CVE-2022-35192
D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service DoS via the User parameter or Pwd parameter to Login.asp...
CVE-2022-37153
An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php...
CVE-2022-37153
An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php...
CVE-2022-37153
An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php...
Cross site scripting
An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php...
CVE-2022-37153
An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php...
PT-2022-23843 · Unknown · Artica Proxy
Name of the Vulnerable Software and Affected Versions: Artica Proxy version 4.30.000000 Description: An issue was discovered in Artica Proxy. There is a XSS vulnerability via the password parameter in "/fw.login.php". Recommendations: For Artica Proxy version 4.30.000000, avoid using the password...
Artica Proxy 跨站脚本漏洞
Artica Proxy is an open source Artica proxy solution from French company Artica. A cross-site scripting vulnerability exists in Artica Proxy version 4.30.0000, which stems from an XSS vulnerability in the password parameter in /fw.login.php...
Loan Management System SQL注入漏洞
Loan Management System is a loan management system by razormist individual developers. Loan Management System suffers from a SQL injection vulnerability that stems from some unknown functionality in the file /index.php being affected, where manipulation of the parameter password can lead to sql...
PT-2022-18556 · Sourcecodester · Sourcecodester Loan Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System affected versions not specified Description: A critical issue affects some unknown functionality of the file /index.php. The manipulation of the password argument leads to SQL injection. The attack can be...
CVE-2022-29709
CommuniLink Internet Limited CLink Office v2.0 was discovered to contain multiple SQL injection vulnerabilities via the username and password parameters...