PHPGurukul Job Portal 跨站脚本漏洞

PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A cross-site scripting vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the JOBID and USERNAME parameters in /jobportal/process.php...

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

Sourcecodehero Event Management System 安全漏洞

Sourcecodehero Event Management System is an open source event management system from Sourcecodehero. A security vulnerability exists in Sourcecodehero Event Management System version 1.0, which is caused by SQL injection via the parameter "username" in /event/admin/login.php...

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

CVE-2024-44727

Sourcecodehero Event Management System 1.0 is vulnerable to an SQL Injection via the username parameter in /event/admin/login.php. Documented across multiple feeds; no patch/version fix details are provided in the supplied materials. Exploitation details, impact, and mitigations beyond the generi...

PT-2024-38973 · Code Projects · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hospital Management System version 1.0 Description: A critical issue has been identified in the code-projects Hospital Management System, affecting some unknown functionality of the file index.php of the component Login. The...

SourceCodester Electric Billing Management System SQL注入漏洞

SourceCodester Electric Billing Management System is an open source electric billing management system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Electric Billing Management System version 1.0, which originates from a SQL injection vulnerability in the username...

PT-2024-38955 · Sourcecodester · Sourcecodester Electric Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Electric Billing Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Electric Billing Management System. This issue affects the file /Actions.php?a=login, where the...

OpenRapid RapidCMS SQL注入漏洞

OpenRapid RapidCMS is an OpenRapid open source CMS system that is fast and easy to use. A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1 and earlier versions, which originates from a SQL injection vulnerability in the username parameter of the /resource/runlogon.php file...

OpenRapid RapidCMS SQL注入漏洞

OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1 and earlier versions, which originates from a SQL injection vulnerability in the username parameter of the /admin/user/user-move-run.php file...

CVE-2024-8301

A vulnerability was found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax/checkin.php. The manipulation of the argument username leads to sql injection. The attack can b...

dingfanzu 安全漏洞

dingfanzu is a php-based takeaway ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu, which is caused by an SQL injection vulnerability in the username parameter of the /ajax/getBasicInfo.php file...

PT-2024-38926 · Unknown · Dingfanzu Cms

Name of the Vulnerable Software and Affected Versions: dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c Description: A critical vulnerability was found in dingfanzu CMS, affecting an unknown functionality of the file /ajax/checkin.php. The manipulation of the username argument leads t...

dingfanzu CMS SQL注入漏洞

dingfanzu CMS is a php based takeaway food ordering website - food ordering system by dingfanzu individual developer. A SQL injection vulnerability exists in dingfanzu CMS, which originates from a SQL injection vulnerability in the username parameter of the /ajax/chpwd.php file...

dingfanzu SQL注入漏洞

dingfanzu is a php-based food ordering website developed by gk2007 individual developer. A SQL injection vulnerability exists in dingfanzu, which is caused by a SQL injection vulnerability in the username parameter of the /ajax/checkin.php file...

CVE-2024-41236

A SQL injection vulnerability in /smsa/adminlogin.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page...

CVE-2024-44795

A cross-site scripting XSS vulnerability in the component /login/disabled.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

Online Bus Reservation Site SQL注入漏洞

Online Bus Reservation Site is an online bus reservation site by Fabian Ros Individual Developer. A SQL injection vulnerability exists in Online Bus Reservation Site version 1.0, which is caused by an SQL injection vulnerability in the Username parameter of the login.php page...

CVE-2024-44795

Gazelle (commit 63b3370) contains a cross-site scripting (XSS) vulnerability in the /login/disabled.php component, allowing an attacker to inject script/HTML via the username parameter. Affected file/component is clearly identified, with exploitation described as arbitrary web script execution. M...

PT-2024-31253

Name of the Vulnerable Software and Affected Versions Gazelle version 63b3370 Description A cross-site scripting XSS issue exists in the /login/disabled.php component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...