CVE-2023-27779

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...

CVE-2023-27779

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...

Sql injection

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...

CVE-2023-27779

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...

CVE-2023-27779

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...

CVE-2023-27779: Improper Neutralization of Special Elements used in an SQL Command

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...

PT-2023-21343

Name of the Vulnerable Software and Affected Versions AM Presencia version 3.7.3 Description A SQL injection issue was found in the login form via the user parameter. This allows for potential exploitation. Recommendations For AM Presencia version 3.7.3, consider restricting access to the login...

PT-2023-22206

Name of the Vulnerable Software and Affected Versions XWiki versions prior to 13.10.11 XWiki versions prior to 14.4.7 XWiki versions prior to 14.10 Description Any user with view rights on commonly accessible documents, including the notification preferences macros, can execute arbitrary Groovy,...

CVE-2020-20522

Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter...

CVE-2020-20522: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter...

KiteCMS cross-site scripting vulnerabilities

KiteCMS is a website CMS. A security vulnerability exists in KiteCMS v.1.1. An attacker can exploit this vulnerability to execute arbitrary code via the registering user parameter...

PT-2023-11555 · Kitecms · Kitecms

Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the registering user parameter. This enables the attacker to perform unauthorized actions on the system. Recommendations: For...

CVE-2023-1368

A vulnerability was found in XHCMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component POST Parameter Handler. The manipulation of the argument user leads to sql injection. The attack can be initiated remotely. The exploit has been...

XHCMS SQL Injection Vulnerability

XHCMS is a general-purpose CMS system developed by huzizhaz. A SQL injection vulnerability exists in XHCMS version 1.0, which originates from the presence of unknown code in the file login.php in the component POST Parameter Handler, which leads to sql injection via the parameter user...

Online Graduate Tracer System SQL Injection Vulnerability

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Graduate Tracer System version 1.0, which stems from an incorrect manipulation of the parameter user resulting in sql injectio...

SourceCodester Computer Parts Sales and Inventory System SQL Injection Vulnerability

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A SQL injection vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which originates from an unknown part of the...

OpenCycleCompass server-php SQL injection vulnerability

server-php is an OpenCycleCompass open source server for iBis applications. An SQL injection vulnerability exists in OpenCycleCompass server-php, which stems from an incorrect manipulation of the parameter user resulting in sql injection...

CVE-2022-48329

MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...

CVE-2022-2933

The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the zeromkoptionspage function. This makes it possible for unauthenticated attackers to inject malicious web scripts vi...

CVE-2022-45165

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used to create an SQL query. It causes this service to be prone to SQL injection...