12 matches found
PT-2025-4308
Name of the Vulnerable Software and Affected Versions ClipBucket V5 versions prior to 5.5.1 - 239 Description A file upload vulnerability exists in the Manage Playlist functionality of the application, specifically surrounding the uploading of playlist cover images. Without proper checks, an...
CVE-2021-26200
The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login as the admin user...
Sql injection
The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login as the admin user...
CVE-2021-26200: Improper Neutralization of Special Elements used in an SQL Command
The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login as the admin user...
SourceCodester user area for Library System SQL Injection Vulnerability
SourceCodester user area for Library System is a library management system from SourceCodester, Inc. A SQL injection vulnerability exists in the SourceCodester user area for Library System, which arises from a lack of validation of externally-entered SQL statements in database-based applications...
PT-2021-16963
Name of the Vulnerable Software and Affected Versions Library System version 1.0 Description The issue allows for SQL injection in the user area, enabling a user to bypass authentication and login as the admin user. Recommendations For Library System version 1.0, at the moment, there is no...
CentOS Control Web Panel 0.9.8.836 Authentication Bypass
Exploit Title: CWP CentOS Control Web Panel ||//theme/original CVE-2019-13360 ================================...
UBUNTU-CVE-2014-3534
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACEPOKEUSRAREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a...
Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities
Document Title: =============== Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-10 Vulnerability Laboratory ID VL-ID: ==================================== 5 Abstract Advisory Information: ============================== The Vulnerability-Lab Team discover...
offl-sql.txt
-+================================================================================+- -+ OFFL = 0.2.6 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 19 JUNE 2008 Script Download:...
CVE-2005-4548
SQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2005-4548: Undefined Security Weakness
SQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors...