CVE-2024-12663

A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The...

CVE-2024-12663 funnyzpc Mee-Admin Login login observable response discrepancy

A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The...

CVE-2024-56112

CyberPanel aka Cyber Panel before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php...

CVE-2024-56112: Improper Neutralization of Input During Web Page Generation

CyberPanel aka Cyber Panel before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php...

PT-2024-10166

Name of the Vulnerable Software and Affected Versions: CyberPanel versions before f0cf648 Description: The issue is related to a lack of protection for the web page structure in the CyberPanel web hosting control panel. This can be exploited by a remote attacker to conduct cross-site scripting...

CyberPanel 安全漏洞

CyberPanel is a web hosting control panel with built-in DNS and email servers by the individual developer Usman Nasir. A security vulnerability exists in versions prior to CyberPanel f0cf648 that stems from allowing cross-site scripting attacks via token or username...

CVE-2024-56112

CyberPanel aka Cyber Panel before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php...

CVE-2024-56112

CyberPanel aka Cyber Panel before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php...

PT-2024-17704

Name of the Vulnerable Software and Affected Versions funnyzpc Mee-Admin versions 1.6 and earlier Description A problematic issue was found in the Login component, affecting unknown code of the file /mee/login. The manipulation of the username argument leads to an observable response discrepancy...

CVE-2024-55099

A SQL Injection vulnerability was found in /admin/index.php in phpgurukul Online Nurse Hiring System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username parameter...

SUSE CVE-2024-43784

lakeFS is an open-source tool that transforms object storage into a Git-like repository. Existing lakeFS users who have issued credentials to users who have been deleted are affected by this vulnerability. When creating a new user with the same username as a deleted user, that user will inherit a...

CVE-2024-12484

A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

PT-2024-17550 · WordPress · Website Toolbox Community

Name of the Vulnerable Software and Affected Versions: Website Toolbox Community plugin for WordPress versions up to, and including, 2.0.1 Description: The issue is related to Reflected Cross-Site Scripting, which occurs due to insufficient input sanitization and output escaping. This allows...

CVE-2024-55099: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/index.php in phpgurukul Online Nurse Hiring System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username parameter...

PT-2024-36478 · Unknown · Phpgurukul Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: phpgurukul Online Nurse Hiring System version 1.0 Description: A SQL injection issue was found in the /admin/index.php endpoint of the phpgurukul Online Nurse Hiring System, allowing remote attackers to execute arbitrary SQL commands and gain...

Codezips Technical Discussion Forum 注入漏洞

Codezips Technical Discussion Forum is a Codezips open source technical discussion forum. An injection vulnerability exists in Codezips Technical Discussion Forum version 1.0, which stems from the parameter Username in the file /signuppost.php that can cause SQL injection...

CVE-2024-12484: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

PT-2024-17617 · Unknown · Codezips Technical Discussion Forum

Name of the Vulnerable Software and Affected Versions: Codezips Technical Discussion Forum version 1.0 Description: A critical vulnerability was found in the unknown code of the file /signuppost.php. The manipulation of the Username argument leads to a SQL injection. The attack can be initiated...

Exploit for SQL Injection in Phpgurukul Online_Nurse_Hiring_System

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-V...

CVE-2024-53245

In Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.1.2312.206, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles, that has a username with the same name as a role with read access to dashboards, could see the dashboard...