PointOfSales SQL Injection Vulnerability

PointOfSales is a point of sale system. The system includes features such as inventory management, customer management and performance management. A SQL injection vulnerability exists in PointOfSales version 1.0. A remote attacker can exploit this vulnerability to view, add, modify, or delete...

Image Management 101: The Web Developer's Guide

This article originally appeared on DevOps.com Online experiences have in many ways supplanted in-person experiences. Today, no one would hesitate to buy a luxury watch online instead of from a jewelry brick-and-mortar store. But as these online experiences become the norm, user expectations for ...

Information Disclosure

kibana is vulnerable to information disclosure. An improperly initialized kibana login screen causes user-entered credentials to be shown in the URL bar and allows untrusted parties to obtain the user's credentials via access logs or through the Referer header when the user browses to another...

CVE-2018-18806

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...

CVE-2018-18806

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...

CVE-2018-18804

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

CVE-2018-18803

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb...

CVE-2018-18803

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb...

CVE-2018-18804

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

Sql injection

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...

Sql injection

Library Management System 1.0 has SQL Injection via the "Search for Books" screen...

Sql injection

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...

Sql injection

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

CVE-2018-18805

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...

CVE-2018-18804

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

CVE-2018-18803

CVE-2018-18803 corresponds to a SQL Injection in Curriculum Evaluation System 1.0, exploitable via the login screen. Technical details in connected records show the vulnerability stems from building SQL queries by string concatenation in code paths (e.g., frmCourse.vb and includes/user.vb), enabl...

CVE-2018-18803

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb...

CVE-2018-18806

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...

CVE-2018-18804

CVE-2018-18804 affects Bakeshop Inventory System 1.0, with an SQL injection on the login screen due to the code path include/publicfunction.vb (string-concatenated SQL). CNVD-2019-00381 confirms a remote SQL injection vulnerability that enables an attacker to view, modify, or delete data in the b...

Lock-Screen Bypass Bug Quietly Patched in Handsets

A design flaw affecting all in-display fingerprint sensors – that left over a half-dozen cellphone models vulnerable to a trivial lock-screen bypass attack – has been quietly patched. The flaw was tied to a bug in the popular in-display fingerprint reader technology used for user authentication...