15967 matches found
CVE-2022-45892: Improper Neutralization of Input During Web Page Generation
In Planet eStream before 6.72.10.07, multiple Stored Cross-Site Scripting XSS vulnerabilities exist: Disclaimer, Search Function, Comments, Batch editing tool, Content Creation, Related Media, Create new user, and Change Username...
CVE-2022-4737: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The...
Bank Management System SQL Injection Vulnerability
Bank Management System is a bank management system. A SQL injection vulnerability exists in Blood Bank Management System version 1.0, which stems from several unknown handlers in the login.php file that manipulate the parameters username/password allowing an attacker to implement SQL injection. N...
CVE-2022-42931
Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username not password was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox 106...
CVE-2022-42931
Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username not password was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox 106...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...
PT-2022-6548 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.5 Description: The issue is related to a primary weakness in the rdiffweb GitHub repository, allowing for authentication bypass. This weakness is due to the username field not being unique to users, enabling...
CVE-2022-42931: Cleartext Storage of Sensitive Information
Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username not password was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox 106...
CVE-2022-42931
Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username not password was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox 106...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3. This issue affects some unknown processing of the file htdocs/templates2/ocstyle/login.tpl of the component Login Page. The manipulation of the argument username leads to cross site...
CVE-2022-4587: Improper Neutralization
A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3. This issue affects some unknown processing of the file htdocs/templates2/ocstyle/login.tpl of the component Login Page. The manipulation of the argument username leads to cross site...
CVE-2022-4587
Summary of CVE-2022-4587 (Opencaching Deutschland oc-server3) Affected software: Opencaching Deutschland oc-server3, specifically the Login Page component (htdocs/templates2/ocstyle/login.tpl). Vulnerability: Cross-site scripting (XSS) via manipulation of the argument username. The issue may be t...
PT-2022-27660 · Opencaching Deutschland · Oc-Server3
Name of the Vulnerable Software and Affected Versions: Opencaching Deutschland oc-server3 affected versions not specified Description: A problematic issue has been found in the Login Page component, affecting the processing of the file htdocs/templates2/ocstyle/login.tpl. The manipulation of the...
oc-server3 Cross-Site Scripting Vulnerability
oc-server3 is an open source geography teaching website by Opencaching Deutschland. A security vulnerability exists in Opencaching Deutschland oc-server3 that stems from cross-site scripting due to incorrect manipulation of the parameter username...
Online Grading System SQL Injection Vulnerability
Sourcecodester Online Grading System is a student information management system. The system provides functions such as student information management and online grading. A security vulnerability exists in Online Grading System version 1.0, which is caused by a uname parameter that allows remote...
FeehiCMS Cross Site Scripting vulnerability
Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...
CVE-2022-40000
Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...
CVE-2021-39427
Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php...