PT-2022-11271

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Leave Management System version v1 Description The issue allows attackers to execute arbitrary SQL commands via the username parameter to the "/leave system/classes/Login.php" API endpoint. This enables attackers to...

CVE-2012-1224: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

PT-2012-3147

Name of the Vulnerable Software and Affected Versions ContentLion Alpha version 1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the PATH INFO in system/classes/login.php. Recommendations For ContentLio...