Lucene search
+L

2464 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/12 7:02 p.m.6 views

CVE-2019-25347

thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts...

7.1CVSS5.9AI score0.00472EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/12 7:02 p.m.7 views

CVE-2019-25347 thesystem App 1.0 - 'username' SQL Injection

thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts...

7.5CVSS5.9AI score0.00472EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/02/12 7:02 p.m.39 views

CVE-2019-25347 thesystem App 1.0 - 'username' SQL Injection

thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts...

7.5CVSS0.00472EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/02/12 12:00 a.m.17 views

PT-2026-7883

thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts...

7.1CVSS5.9AI score0.00472EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/02/10 7:33 a.m.11 views

CVE-2026-2221

A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The...

9.8CVSS5.4AI score0.00354EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/02/09 7:02 a.m.9 views

CVE-2026-2221 code-projects Online Reviewer System Login index.php sql injection

A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The...

7.5CVSS5.4AI score0.00354EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/02/09 7:02 a.m.51 views

CVE-2026-2221 code-projects Online Reviewer System Login index.php sql injection

A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The...

7.5CVSS0.00354EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/02/09 12:00 a.m.26 views

PT-2026-7074

A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The...

7.5CVSS5.4AI score0.00354EPSS
SaveExploits1References6
NVD
NVD
added 2026/02/08 3:15 p.m.14 views

CVE-2026-2158

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /checkuser.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely...

9.8CVSS0.00385EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/02/08 3:02 p.m.47 views

CVE-2026-2158 code-projects Student Web Portal check_user.php sql injection

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /checkuser.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely...

7.5CVSS0.00385EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/08 3:02 p.m.10 views

CVE-2026-2158

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /checkuser.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely...

7.5CVSS7.2AI score0.00385EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
added 2026/02/08 3:02 p.m.9 views

EUVD-2026-5791

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /checkuser.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely...

9.8CVSS7.2AI score0.00385EPSS
SaveExploits1References5
CVE
CVE
added 2026/02/08 3:02 p.m.30 views

CVE-2026-2158

CVE-2026-2158 affects code-projects Student Web Portal 1.0. The vulnerability is in an unknown function within the file /check_user.php where manipulation of the Username argument enables remote SQL injection. This has been consistently described across multiple sources (NVD, Red Hat, CNNVD, etc....

9.8CVSS7.2AI score0.00385EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/02/08 3:30 a.m.15 views

GHSA-2G7V-HGHF-GRG4 mcp-maigret vulnerable to command injection

A vulnerability was determined in BurtTheCoder mcp-maigret up to 1.0.12. This affects an unknown part of the file src/index.ts of the component searchusername. Executing a manipulation of the argument Username can lead to command injection. The attack may be launched remotely. Upgrading to versio...

6.3CVSS5.7AI score0.01786EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/02/08 12:00 a.m.17 views

PT-2026-6989

Name of the Vulnerable Software and Affected Versions code-projects Student Web Portal version 1.0 Description A flaw exists in code-projects Student Web Portal 1.0 that allows for remote execution of SQL injection. The issue is located in the file /check user.php and involves manipulation of the...

7.5CVSS5.8AI score0.00385EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2026/02/08 12:00 a.m.18 views

Maigret MCP Server 命令注入漏洞

The Maigret MCP Server is a context-based protocol server for intelligence analysis developed by Burt as an individual developer. Versions of the Maigret MCP Server prior to 1.0.12 contained a command injection vulnerability. This vulnerability stemmed from incorrect handling of the parameter...

9.8CVSS6.6AI score0.01786EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/02/08 12:00 a.m.16 views

Code-Projects Student Web Portal SQL注入漏洞

Code-Projects Student Web Portal is an open-source student portal developed by Code-Projects. Version 1.0 of Code-Projects Student Web Portal has a SQL injection vulnerability, which stems from incorrect handling of the Username parameter in the file /checkuser.php, potentially leading to SQL...

9.8CVSS7.2AI score0.00385EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/02/08 12:00 a.m.20 views

Code-Projects Online Examination System SQL注入漏洞

The Code-Projects Online Examination System is an open-source online examination system developed by Code-Projects. Version 1.0 of the Code-Projects Online Examination System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameters username and password in...

9.8CVSS7.2AI score0.00325EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/02/08 12:00 a.m.25 views

PT-2026-7005

Name of the Vulnerable Software and Affected Versions code-projects Online Examination System version 1.0 Description A flaw exists in the Online Examination System that allows for SQL injection through the manipulation of the username and password arguments in the login.php file. This issue can ...

7.5CVSS5.6AI score0.00325EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/02/06 12:00 a.m.17 views

EDIMAX BR-6208AC 安全漏洞

The EDIMAX BR-6208AC is a wireless broadband router produced by Edimax Corporation of Taiwan. A security vulnerability exists in the Edimax BR-6208AC 21.02 version, which stems from incorrect handling of the Username/Password parameter. This vulnerability may allow unauthorized users to access th...

7.5CVSS6AI score0.00622EPSS
SaveExploits1References4
Rows per page
Query Builder