712 matches found
Student File Management System user_id Parameter SQL Injection Vulnerability
Student File Management System is a student file management system. A SQL injection vulnerability exists in Student File Management System, which originates from the lack of validation of an externally entered SQL statement in the parameter userid in the file /admin/updateuser.php. An attacker ca...
CVE-2025-14586
A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089B20211224. Affected by this issue is the function snprintf of the file /cgi-bin/cstecgi.cgi?action=exportOvpn=user. This manipulation of the argument User causes os command injection. Remote exploitation of the attack is possible. The...
EUVD-2025-203237
A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089B20211224. Affected by this issue is the function snprintf of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user. This manipulation of the argument User causes os command injection. Remote exploitation of the attack is possible...
PT-2025-51091
Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0cu.2089 B20211224 Description A flaw exists in TOTOLINK X5000R that allows for operating system command injection. This occurs due to the manipulation of the User argument within the snprintf function located in th...
CVE-2025-64126 Zenitel TCIV-3+ OS Command Injection
An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP address or filtering potentially malicious characters. This could allow an unauthenticated attacker to inject arbitrary...
CVE-2025-22170
Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action...
CVE-2025-11477
A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.php. The manipulation of the argument User results in sql injection. The attack may be launched remotely. The exploit has been released to t...
CVE-2025-11477 SourceCodester Wedding Reservation Management System global.php sql injection
A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.php. The manipulation of the argument User results in sql injection. The attack may be launched remotely. The exploit has been released to t...
SourceCodester Wedding Reservation Management System SQL Injection Vulnerability
SourceCodester Wedding Reservation Management System is a SourceCodester open source wedding reservation management system. A SQL injection vulnerability exists in SourceCodester Wedding Reservation Management System version 1.0, which stems from an incorrect manipulation of the parameter User in...
EUVD-2007-0558
Malware in sbrugna...
EUVD-2006-3270
Malware in sbrugna...
EUVD-2006-1148
Malware in sbrugna...
EUVD-2018-8227
Malware in sbrugna...
EUVD-2005-0319
Malware in sbrugna...
EUVD-2013-6626
Malware in sbrugna...
EUVD-2020-23397
Malware in sbrugna...
EUVD-2005-0318
Malware in sbrugna...
EUVD-2005-0543
Malware in sbrugna...