PT-2021-11210

Name of the Vulnerable Software and Affected Versions: College Management System Php version 1.0 Description: The issue concerns SQL injection vulnerabilities in the index.php page. These vulnerabilities arise from the POST parameters unametxt and pwdtxt, which are not filtered before being passe...

CVE-2020-26051: Improper Neutralization of Special Elements used in an SQL Command

College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query...

[SECURITY] Fedora 33 Update: drupal7-7.72-1.fc33

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

College-Management-System-Php 1.0 - SQL Injection

College-Management-System-Php version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: College-Management-System-Php 1.0 - Authentication Bypass / SQL Injection Exploit Author: BLAY ABU SAFIAN Inveteck Global Website:...

College-Management-System-Php 1.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: College-Management-System-Php 1.0 - Authentication Bypass / SQL Injection Exploit Author: BLAY ABU SAFIAN Inveteck Global Website: https://github.com/olotieno/College-Management-System-Php Vendor: https://github.com/olotieno/...

Joomla Object Injection

Added: 10/24/2019 Background Joomla is a content management system written in PHP. Problem An object injection vulnerability in Joomla could allow a remote, unauthenticated attacker to execute arbitrary commands on the server. This vulnerability has been nicknamed "Rusty Joomla". Resolution Upgra...

YUNUCMS cross-site scripting vulnerability (CNVD-2019-00565)

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS1.1.8 version of the app/admin/controller/System.php file there is a cross-site scripting vulnerability , a remote attacker can write to the sys.php fi...

QCMS cross-site scripting vulnerability (CNVD-2019-10276)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/system.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CScms Cross-Site Request Forgery Vulnerability

CScms is a content management system CMS developed on a CI framework. A cross-site scripting vulnerability exists in the plugins/sys/admin/Sys.php file in CScms version 4.1. A remote attacker can exploit this vulnerability to change the administrator name and password with the help of the...

WD-CMS 3.0 - Multiple Vulnerabilities

Exploit Title: WD-CMS 3.0 Multiple Vulnerabilities Date: December 31st, 2009 Author: Sora Software Link: http://www.webdiamond.net/cms.html Version: 3.0 Tested on: Windows Vista and Linux Backtrack 3 --------------------------------------------------------------- WD-CMS 3.0 Multiple Vulnerabiliti...