15935 matches found
CVE-2023-42359: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Exam Form Submission in PHP with Source Code v.1.0 allows a remote attacker to escalate privileges via the val-username parameter in /index.php...
Online Exam Form Submission SQL Injection Vulnerability
Online Exam Form Submission is an online exam form submission application by janobe Personal Developer. A security vulnerability exists in Online Exam Form Submission version v.1.0 that originates from allowing remote attackers to escalate privileges via the val-username parameter in /index.php...
Information Disclosure Vulnerability on some Huawei Products (huawei-sa-20200715-03-informationleak)
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2023-38912
SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter...
Sql injection
SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter...
CVE-2023-38912
SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter...
Super Store Finder SQL Injection Vulnerability
Super Store Finder is an easy-to-use Google Maps API store finder program Super Store Finder by Super Store Finder. A security vulnerability exists in Super Store Finder version v.3.6, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a carefully crafted...
Length limitation of "Associated User" username
Citrix DaaS Manage - Monitor - Trends - Sessions - Associated User only displays part of username...
PT-2023-26683
Name of the Vulnerable Software and Affected Versions Super Store Finder PHP Script version 3.6 Description A SQL injection issue allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter. This enables the attacker to potentially access and manipulate...
CVE-2023-38912: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter...
CVE-2023-38912
SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter...
Windows Workspace Authentication Error "incorrect user name or password" via NetScaler Gateway
When using Windows workspace, after input username, password and passcode, error prompt "incorrect username or password"two-factor basic authentication. And can't access Storefront resource list. While access same Gateway with Web Browser is working fine...
CVE-2023-40725
A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames...
CVE-2023-40725
A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames...
CVE-2023-40725
CVE-2023-40725 affects Siemens QMS Automotive (all versions prior to v12.39). The issue arises from inconsistent login error messages in response to invalid credentials, enabling attacker-controlled username enumeration. Public sources (NVD/Red Hat security page and Siemens ProductCERT advisory S...
PT-2023-5182 · Unknown · Qms Automotive
Name of the Vulnerable Software and Affected Versions: QMS Automotive versions prior to V12.39 Description: A vulnerability has been identified in QMS Automotive that allows an attacker to enumerate usernames and identify valid usernames due to the application returning inconsistent error message...
Siemens QMS Automotive 安全漏洞
Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has an information disclosure hole that can be exploited by an attacker to enumerate usernames and identify valid usernames...
CVE-2023-40725: Generation of Error Message Containing Sensitive Information
A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames...