21 matches found
CVE-2026-78171
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2026-78171
itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/processlogin.php. The manipulation of the User argument allows a remote, unauthenticated attacker to inject SQL queries, potentially compromising confidentiality, integrity, and availabilit...
CVE-2026-78171 itsourcecode Sales and Inventory System processlogin.php sql injection
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...
EUVD-2026-64693
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...
EUVD-2022-51460
Malicious code in bioql PyPI...
CVE-2022-4088
A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2022-4088
A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit...
Sql injection
A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2022-4089
The CVE-2022-4089 entry concerns the Rickxy Stock Management System. Affected component: the login processing page /pages/processlogin.php. Root cause: manipulation of the user argument enables cross-site scripting. Impact: results in client-side script execution, with exploitation possible remot...
CVE-2022-4089 rickxy Stock Management System processlogin.php cross site scripting
A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability affects unknown code of the file /pages/processlogin.php. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has...
CVE-2022-4089 rickxy Stock Management System processlogin.php cross site scripting
A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability affects unknown code of the file /pages/processlogin.php. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has...
CVE-2022-4088
CVE-2022-4088 affects rickxy Stock Management System. The vulnerability is in /pages/processlogin.php where manipulating the user/password arguments leads to SQL injection. The issue is exploitable remotely and the exploit has been disclosed. There is no explicit patch in the provided documents; ...
CVE-2022-4088 rickxy Stock Management System processlogin.php sql injection
A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2022-3118
A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...
Sql injection
A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-3118 Sourcecodehero ERP System Project processlogin.php sql injection
A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-3118 Sourcecodehero ERP System Project processlogin.php sql injection
A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...
Bit 5 Blog processlogin.php username Parameter SQL Injection - Ver2 (CVE-2006-0320)
An SQL injection vulnerability has been reported in Bit 5 Blog. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Bit 5 Blog processlogin.php username Parameter SQL Injection - Ver2 (CVE-2006-0320)
An SQL injection vulnerability has been reported in Bit 5 Blog. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2006-0320
SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username and 2 password parameter...