2416 matches found
Food Ordering Management System SQL Injection Vulnerability
Food Ordering Management System is a food ordering management system by Carlo Montero, an individual developer. It provides an online platform to order food from a restaurant or fast food chain. A SQL injection vulnerability exists in Food Ordering Management System version 1.0, which stems from...
(Pwn2Own) QNAP TS-464 username Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of QNAP TS-464 NAS devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the...
itsourcecode Banking Management System SQL Injection Vulnerability
Banking Management System is itsourcecode open source banking management system. SQL injection vulnerability exists in itsourcecode Banking Management System version 1.0, the vulnerability stems from adminclass.php contains some unknown functions, which leads to SQL injection via the parameter...
PT-2024-37443 · Unknown · Itsourcecode Farm Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Farm Management System version 1.0 Description: A critical issue affects the itsourcecode Farm Management System, specifically the username argument in the file index.php of the Login component, leading to SQL injection. This can...
PT-2024-4406 · Unknown · Alton Management System
Name of the Vulnerable Software and Affected Versions: Loan Management System version 1.0 Description: A critical vulnerability was found in the Loan Management System, affecting the file login.php of the Login Page component. The manipulation of the username argument leads to SQL injection. The...
PT-2024-4404 · Itsourcecode · Itsourcecode Banking Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Banking Management System version 1.0 Description: A critical issue was found in the Banking Management System, affecting an unknown functionality of the file admin class.php. The manipulation of the username argument leads to SQ...
The vulnerability of the /usr/bin/pppd component of the TP-Link Omada ER605 VPN router’s microprogramming software allows a malicious actor to execute arbitrary code under the root user context.
The vulnerability of the /usr/bin/pppd component of the TP-Link Omada ER605 VPN router software exists due to the lack of measures taken to neutralize specific elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code under the...
CVE-2024-5985
A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Best Online News Portal SQL Injection Vulnerability
Best online news portal is an online news portal by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Best Online News Portal version 1.0, which originates when /admin/index.php contains some unknown functions that cause SQL injection via the parameter usernam...
PT-2024-37294 · Unknown · Sourcecodester Best Online News Portal
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Online News Portal version 1.0 Description: A critical vulnerability has been found in the software, affecting an unknown part of the file /admin/index.php. The manipulation of the username argument leads to SQL injection...
CVE-2024-37849
A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter...
CVE-2024-37849
A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter...
CVE-2024-37849
A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter...
PT-2024-27783 · Unknown · Itsourcecode Billing System
Name of the Vulnerable Software and Affected Versions: itsourcecode Billing System version 1.0 Description: A SQL Injection issue allows a local attacker to execute arbitrary code in process.php via the username parameter. Recommendations: For itsourcecode Billing System version 1.0, consider...
Billing System security breach
Billing System is a billing system by angel jude suarez personal developer. A security vulnerability exists in Billing System version 1.0. An attacker can exploit this vulnerability to execute arbitrary code in process.php via the username parameter...
Sourcecodester Stock Management System SQL Injection Vulnerability
Sourcecodester Stock Management System is an inventory management system. A SQL injection vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from an unknown function in index.php in the component Login that allows an attacker to perform SQL injection via...
CVE-2024-3102 JSON Injection in mintplex-labs/anything-llm
A JSON Injection vulnerability exists in the mintplex-labs/anything-llm application, specifically within the username parameter during the login process at the /api/request-token endpoint. The vulnerability arises from improper handling of values, allowing attackers to perform brute force attacks...
PT-2024-23727 · Mintplex · Anything-Llm
Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm affected versions not specified Description: A JSON Injection issue exists in the application, specifically within the username parameter during the login process at the "/api/request-token" endpoint. This issue...