2416 matches found
PT-2023-16116 · Sourcecodester · Sourcecodester Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A critical issue has been found in the Login Page component of the affected software. The issue is related to the manipulation of the Username argument in the...
Online Food Ordering System SQL注入漏洞
Online Food Ordering System is an online food ordering system. Online Food Ordering System suffers from a SQL injection vulnerability, which originates from the lack of validation of an externally entered SQL statement in the Username parameter of the component's login page, action = login, which...
Loan Management System SQL注入漏洞
Loan Management System is a loan management system by razormist individual developers. A SQL injection vulnerability exists in Loan Management System version 1.0, which originates from unknown code in the file login.php that manipulates the parameter username to cause SQL injection...
Lead Management System SQL Injection Vulnerability
Lead management system is a lead management system developed by Mayuri K. The Lead Management System version 1.0 is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the login.php parameter username, and can be exploited by attackers to The...
CVE-2022-4855
A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
PT-2022-28140 · Sourcecodester · Sourcecodester Loan Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Lead Management System version 1.0 Description: A critical issue was found in the SourceCodester Lead Management System. The manipulation of the username argument in the login.php file leads to sql injection. This issue can be...
PT-2022-28051 · Sourcecodester · Sourcecodester Loan Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Blood Bank Management System version 1.0 Description: A critical issue affects the processing of the file login.php, where the manipulation of the username and password arguments leads to SQL injection. The attack can be...
Bank Management System SQL注入漏洞
Bank Management System is a bank management system. A SQL injection vulnerability exists in Blood Bank Management System version 1.0, which stems from several unknown handlers in the login.php file that manipulate the parameters username/password allowing an attacker to implement SQL injection. N...
oc-server3 跨站脚本漏洞
oc-server3 is an open source geography teaching website by Opencaching Deutschland. A security vulnerability exists in Opencaching Deutschland oc-server3 that stems from cross-site scripting due to incorrect manipulation of the parameter username...
Online Grading System SQL注入漏洞
Sourcecodester Online Grading System is a student information management system. The system provides functions such as student information management and online grading. A security vulnerability exists in Online Grading System version 1.0, which is caused by a uname parameter that allows remote...
CVE-2021-39427
Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php...
CVE-2021-39427
Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php...
Cross site scripting
Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php...
188Jianzhan 跨站脚本漏洞
Liaoning Vtime Technology 188Jianzhan Demon Baba website builder is an open source website builder from China's Liaoning Vtime Technology Liaoning Vtime Technology. A security vulnerability exists in 188Jianzhan version 2.10. An attacker can exploit this vulnerability to execute arbitrary code vi...
CVE-2021-39427
Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php...
CVE-2022-38488
logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...
Sql injection
logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...
PT-2022-24424 · Unknown · Logrocket-Oauth2-Example
Name of the Vulnerable Software and Affected Versions: logrocket-oauth2-example versions prior to 2020-05-27 Description: The issue allows SQL injection via the /auth/register API endpoint, specifically through the username parameter. Recommendations: For versions prior to 2020-05-27, as a...
