CVE-2020-37004: Improper Neutralization of Special Elements used in an SQL Command

The Ultimate Project Manager CRM PRO version 2.0.5 contains a blind SQL injection vulnerability that allows attackers to extract usernames and password hashes from the tblusers database table. Attackers can exploit the /frontend/getarticlesuggestion/ endpoint by crafting malicious search paramete...

Design/Logic Flaw

Freelance Auction Script 1.0 stores user passwords in plaintext in the tblusers table, which allows attackers to gain privileges by reading the table...

CVE-2008-2279

Freelance Auction Script 1.0 stores user passwords in plaintext in the tblusers table, which allows attackers to gain privileges by reading the table...

CVE-2008-2279

Freelance Auction Script 1.0 stores user passwords in plaintext in the tblusers table, which allows attackers to gain privileges by reading the table...

CVE-2008-2279: Undefined Security Weakness

Freelance Auction Script 1.0 stores user passwords in plaintext in the tblusers table, which allows attackers to gain privileges by reading the table...

Freelance Auction Script 1.0 - browseproject.php SQL Injection

Freelance Auction Script 1.0 - browseproject.php SQL Injection --==+================================================================================+==-- --==+ Freelance Auction Script 1.0 browseproject.php SQL Injection Vulnerability +==--...