Online Student Enrollment System SQL Injection Vulnerability

Online Student Enrollment System is an online student enrollment system developed by Lyndon Bermoy, an individual developer. A security vulnerability exists in Online Student Enrollment System v1.0, which stems from a username parameter in its /studentenrollment/admin/login.php file that allows a...

CVE-2022-46623

Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-46623

Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter...

Sql injection

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /fos/admin/ajax.php?action=login of the component Login Page. The manipulation of the argument Username leads to sql injection. It is possib...

Sql injection

Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter...

PT-2023-16116 · Sourcecodester · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A critical issue has been found in the Login Page component of the affected software. The issue is related to the manipulation of the Username argument in the...

CVE-2022-46623

Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-46623

Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter...

Foloosi Shopping 5.5.7 Insecure Settings

==================================================================================================================================== | Title : Foloosi Shopping v5.5.7 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

CVE-2023-0256: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /fos/admin/ajax.php?action=login of the component Login Page. The manipulation of the argument Username leads to sql injection. It is possib...

CVE-2022-46623: Improper Neutralization of Special Elements used in an SQL Command

Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter...

PT-2023-14969 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0.0 Description: The Judging Management System contains a SQL injection issue via the username parameter. This allows for potential exploitation. Recommendations: For Judging Management System version 1.0.0...

CVE-2022-46371 Alotcer - AR7088H-A Information disclosure

Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default administrator user name...

PT-2023-14920 · Alotcer · Alotcer - Ar7088H-A

Name of the Vulnerable Software and Affected Versions: Alotcer - AR7088H-A firmware version 16.10.3 Description: The issue concerns an information disclosure where an unspecified error message contains the default administrator user name. Recommendations: For Alotcer - AR7088H-A firmware version...

CVE-2022-46371: Exposure of Sensitive Information to an Unauthorized Actor

Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default administrator user name...

Evaluating SQL Injection Vulnerabilities in Management Systems

Judging Management System is a Judging Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Judging Management System v1.0, which originates from a username parameter containing a SQL injection...

Alotcer AR7088H security vulnerability

The Alotcer AR7088H is an embedded edge router from Alotcer China. A security vulnerability exists in the Alotcer AR7088H firmware version 16.10.3, which stems from the presence of an information disclosure where an unspecified error message contains the default administrator username...

SQL Injection Vulnerability in Online Food Ordering Systems

Online Food Ordering System is an online food ordering system. Online Food Ordering System suffers from a SQL injection vulnerability, which originates from the lack of validation of an externally entered SQL statement in the Username parameter of the component's login page, action = login, which...

Wordpress Paid Membership Pro code Unauthenticated SQLi

Paid Membership Pro, a WordPress plugin, prior to 2.9.8 is affected by an unauthenticated SQL injection via the code parameter. Remote attackers can exploit this vulnerability to dump usernames and password hashes from the wpusers table of the affected WordPress installation. These password hashe...

CVE-2022-4499 The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack.

TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of the username and password...