2415 matches found
Cross site scripting
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting XSS vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
Delta Controls enteliTOUCH 跨站脚本漏洞
Delta Controls enteliTOUCH is a touchscreen building controller from Delta Controls Canada. A security vulnerability exists in Delta Controls enteliTOUCH versions 3.40.3935, 3.40.3706, and 3.33.4005, which stems from a cross-site scripting vulnerability discovered via the Username parameter. The...
CVE-2022-29732
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting XSS vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...
GHSA-RVF8-C35M-8289 Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...
CVE-2021-34111
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...
CVE-2021-34111
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...
CVE-2022-29009
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication...
Directory Management System SQL注入漏洞
Directory Management System is a directory management system. SQL injection vulnerability exists in Directory Management System version 1.0, which stems from multiple SQL injection vulnerabilities in the username and password parameters in the administration panel. An attacker could use this...
CVE-2022-28110
Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page...
CVE-2022-28110
Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page...
CVE-2022-28110
CVE-2022-28110 : Hotel Management System v1.0 is vulnerable to a SQL injection via the username parameter on the login page. The issue allows injected SQL to affect data confidentiality, integrity, and availability (CVSSv3.1 base score 9.8, CRITICAL). Exploitation status or in‑the‑wild details ar...
Hotel Management System SQL注入漏洞
Hotel Management System is a MIS project based on a hotel management system. v1.0 of Hotel Management System is vulnerable to SQL injection, which stems from a login page whose username parameter was found to contain SQL injection. An attacker could exploit the vulnerability to perform SQL...
Delta Controls enteliTOUCH 3.40.3935 Cross Site Scripting Vulnerability
enteliTouch XSS alertdocument.cookie" / input type="hidden" n...
Delta Controls enteliTOUCH 3.40.3935 Cross Site Scripting
enteliTouch XSS alertdocument.cookie" /...
CVE-2022-28363
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/loginprocess username parameter via GET. No authentication is required...
Rumble Mail Server Cross-Site Scripting Vulnerability
Rumble Mail Server is a mail server suite for SMTP ESMTPSA, HTTP, POP3 and IMAP4v1 by Daniel Gruno, a personal developer.A cross-site scripting vulnerability exists in Rumble Mail Server version 0.51.3135, which stems from the username parameter's lack of data validation filtering for user The...
CVE-2022-27124
Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...