Design/Logic Flaw

A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of t...

PT-2023-22703 · Unknown · Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: Medicine Tracker System version 1.0 Description: A username enumeration issue was discovered in the login functionality, allowing a malicious user to guess a valid username due to a different response time from invalid usernames. When a valid...

CVE-2023-30458: Observable Discrepancy

A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of t...

CVE-2023-30458

A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of t...

CVE-2023-30458

Summary: Medicine Tracker System 1.0 suffers a username enumeration in its login function: valid usernames leak via longer response times tied to password length. Impact: potential credential discovery over network with no direct exploitation details in the provided documents. Remediation (suppor...

CVE-2023-30458

A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of t...

Medicine Tracker System 安全漏洞

Medicine Tracker System is a medication tracking system by the individual developer Carlo Montero. A security vulnerability exists in Medicine Tracker System version 1.0, which stems from a username enumeration issue. The vulnerability can be exploited by an attacker to guess a valid username by...

How to Customize Gateway Login Page Labels for Custom Theme when nFactor Login Schema is enabled

This article helps you customize gateway login page labels such as username/password field labels for custom theme when you are using nfactor authentication...

CVE-2023-27092

Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter...

Cross site scripting

Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter...

JbootFly 跨站脚本漏洞

JbootFly is a community of individual developers by Michael Yang. JbootFly has a security vulnerability that stems from a cross-site scripting XSS vulnerability. The vulnerability can be exploited by an attacker to obtain sensitive information via the username parameter...

CVE-2023-27092

Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter...

PT-2023-20949

Name of the Vulnerable Software and Affected Versions Jbootfly affected versions not specified Description A Cross Site Scripting issue allows attackers to obtain sensitive information via the username parameter. Recommendations At the moment, there is no information about a newer version that...

CVE-2023-27092

Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter...

CVE-2023-27092: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter...

CVE-2023-27092

Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter...

Nmap-API - Uses Python3.10, Debian, python-Nmap, And Flask Framework To Create A Nmap API That Can Do Scans With A Good Speed Online And Is Easy To Deploy

Uses python3.10, Debian, python-Nmap, and flask framework to create a Nmap API that can do scans with a good speed online and is easy to deploy. This is a implementation for our college PCL project which is still under development and constantly updating. API Reference Get all items GET...

PT-2023-17720 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A critical issue was found in the system, affecting the /classes/Login.php file. The manipulation of the username argument leads to SQL injection. This issue can be...

Sourcecodester Vehicle Service Management System SQL注入漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 SQL injection vulnerability , the vulnerability stems from the...

CVE-2023-2093: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...