PT-2023-13714 · Vantage6 · Vantage6

Name of the Vulnerable Software and Affected Versions: vantage6 versions prior to 3.8.0 Description: vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. It does not inform the user of wrong username/password combination if the username actually exists, ...

CVE-2023-24364

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel...

CVE-2023-24364

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel...

CVE-2023-24364: Improper Neutralization of Special Elements used in an SQL Command

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel...

CVE-2023-23155: Improper Neutralization of Special Elements used in an SQL Command

Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login...

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a Simple Customer Relationship Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which stems from a SQL injection vulnerability via the username...

PT-2023-18862 · Unknown · Art Gallery Management System Project

Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project in PHP version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter in the Admin Login. Recommendations: For version 1.0,...

Art Gallery Management System SQL注入漏洞

Art Gallery Management System is an art gallery management system developed by Anuj Kumar, an individual developer. A security vulnerability exists in Art Gallery Management System Project PHP version 1.0, which can be exploited by an attacker to perform SQL injection via the username parameter i...

CVE-2023-1037: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /APR/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql...

Dental Clinic Appointment Reservation System SQL注入漏洞

Dental Clinic Appointment Reservation System is a Dental Clinic Appointment Reservation System by jkev Individual Developer. A SQL injection vulnerability exists in SourceCodester Dental Clinic Appointment Reservation System version 1.0, which is caused by an incorrect manipulation of the usernam...

DEBIAN-CVE-2023-26032

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain SQL Injection via malicious jason web token. The Username field of the JWT token was trusted when performing an SQL...

CVE-2023-26032

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain SQL Injection via malicious jason web token. The Username field of the JWT token was trusted when performing an SQL...

CVE-2023-26032: Improper Neutralization of Special Elements used in an SQL Command

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain SQL Injection via malicious jason web token. The Username field of the JWT token was trusted when performing an SQL...

CVE-2023-0997

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

Sql injection

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

Kshitish 2.0 Default Credentials

==================================================================================================================================== | Title : kshitish v2.0 Multipurpose eCommerce Platform Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...

CVE-2023-0997: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

PT-2023-16675 · Sourcecodester · Moosikay E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester Moosikay E-Commerce System version 1.0 Description: A critical issue affects the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the username argument leads to sql injection. The attack may...

Moosikay E-Commerce System SQL注入漏洞

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. A SQL injection vulnerability exists in SourceCodester Moosikay E-Commerce System version 1.0, which stems from an incorrect manipulation of the username parameter resulting in sql injection...

WS-2023-0058

Unauthenticated OS Command Injection in stamparm/maltrail exists in stamparm/maltrail prior to 0.55. The subprocess.checkoutput function in mailtrail/core/http.py contains a command injection vulnerability in the params.get"username"parameter. An attacker can exploit this vulnerability by injecti...