15967 matches found
PT-2023-10247 · Danynab · Movify-J
Name of the Vulnerable Software and Affected Versions: danynab movify-j affected versions not specified Description: A critical vulnerability was found in danynab movify-j, affecting the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument...
PT-2023-19173 · Unknown · Ldap Integration
Name of the Vulnerable Software and Affected Versions: LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login affected versions not specified Description: The issue arises from the extension not properly sanitizing the username POST parameter, leading to LDAP Injection. This...
CVE-2023-23749: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing the 'username' POST parameter. An attacker can manipulate this paramter to dump arbitrary contents form the LDAP Database...
VulnCheck KEV: CVE-2022-39197
An XSS Cross Site Scripting vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the...
Active Matrimonial CMS 3.5 Insecure Settings
==================================================================================================================================== | Title : Active Matrimonial CMS v3.5 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
OpenLDAP injection vulnerability
OpenLDAP is an open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Foundation in the United States. A security vulnerability exists in the Joomla plugin LDAP Integration with Active Directory and OpenLDAP that stems from not properly cleaning the POST...
CVE-2015-10055
A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes/user.js. The manipulation of the argument username/password leads to sql injection. The patch is named 68b9dc346e88b494df00d88c7d058e96820e1479. It is...
KesionCMS X 1.5.160902 Insecure Settings
==================================================================================================================================== | Title : KesionCMS X 1.5.160902 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
CVE-2015-10055: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes/user.js. The manipulation of the argument username/password leads to sql injection. The patch is named 68b9dc346e88b494df00d88c7d058e96820e1479. It is...
PT-2023-10234 · Unknown · Picturethiswebserver
Name of the Vulnerable Software and Affected Versions: PictureThisWebServer affected versions not specified Description: A critical issue affects the function router.post of the file routes/user.js. The manipulation of the arguments username and password leads to sql injection. Recommendations:...
PictureThisWebServer SQL Injection Vulnerability
PictureThisWebServer is a web project. PictureThisWebServer suffers from a SQL injection vulnerability that stems from a security issue in the function router.post in the file routes/user.js, where manipulation of the parameter username/password leads to SQL injection...
PT-2023-16160 · Unknown · Sourcecodester Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical vulnerability was found in the SourceCodester Online Food Ordering System, affecting the Login Module in the file admin class.php. The...
SQL Injection Vulnerability in Online Food Ordering Systems
SourceCodester Online Food Ordering System is an online food ordering system. A SQL injection vulnerability exists in SourceCodester Online Food Ordering System, which stems from a problem with unknown code in the file adminclass.php, where an operation on the parameter username can lead to sql...
PT-2023-12636
Name of the Vulnerable Software and Affected Versions publify/publify versions prior to 9.2.10 Description The issue is related to an integer overflow or wraparound in the publify/publify GitHub repository. This is due to an unlimited length user name field. Recommendations For versions prior to...
CVE-2022-46502
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...
CVE-2022-46502
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...
CVE-2022-46502
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...
CVE-2022-46502: Improper Neutralization of Special Elements used in an SQL Command
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...
CVE-2022-46502
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...
Online Student Enrollment System SQL Injection Vulnerability
Online Student Enrollment System is an online student enrollment system developed by Lyndon Bermoy, an individual developer. A security vulnerability exists in Online Student Enrollment System v1.0, which stems from a username parameter in its /studentenrollment/admin/login.php file that allows a...