CVE-2025-1869

CVE-2025-1869 describes a SQL injection vulnerability in the 101news project (version 1.0) affecting the username parameter in admin/check_avalability.php. Root cause: improper input handling in that parameter allows injection into the SQL query. Impact per CVSS is high across confidentiality, in...

CVE-2025-1869 SQL injection vulnerability in 101news

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/checkavalability.php...

The vulnerability of the adm_mod_pwd() function in the SSI service of the TRENDnet TEW-821DAP wireless access points allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the admmodpwd function in the SSI microprogramming system of TRENDnet TEW-821DAP wireless access points is related to the escape operation from memory buffers when processing the username parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

CVE-2024-34243

Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...

code-projects Vehicle Parking Management System 安全漏洞

Code-Projects Vehicle Parking Management System is an open source vehicle parking management system from Code-Projects. A security vulnerability exists in code-projects Vehicle Parking Management System version 1.0, which stems from an incorrect manipulation of the parameter username that can cau...

PT-2025-6040 · Kelio · Kelio Visio X4 +2

Name of the Vulnerable Software and Affected Versions: Kelio Visio 1 versions 3.2C through 5.1K Kelio Visio X7 versions 3.2C through 5.1K Kelio Visio X4 versions 3.2C through 5.1K Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability that could allow an attacker to execute ...

CVE-2024-11256

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has bee...

CVE-2024-11258

A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2024-8368

A vulnerability was found in code-projects Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched...

CVE-2025-0971

A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Account/EditProfile of the component Profile Editing. The manipulation of the argument username leads to cross site scripting. The attac...

Zenvia 代码注入漏洞

Zenvia is a complete customer service software from Zenvia, Inc. A code injection vulnerability exists in Zenvia version 25.01.22 and prior versions, which stems from an incorrect manipulation of the parameter username that can lead to cross-site scripting attacks...

PT-2025-4117 · Zenvia · Zenvia Movidesk

Name of the Vulnerable Software and Affected Versions: Zenvia Movidesk versions prior to 25.01.22.245a473c54 Description: A problematic issue was found in Zenvia Movidesk, affecting some unknown functionality of the file /Account/EditProfile of the component Profile Editing. The manipulation of t...

CVE-2025-0721

A vulnerability classified as problematic has been found in needyamin imagegallery 1.0. This affects the function imagegallery of the file /view.php. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

image_gallery 跨站脚本漏洞

imagegallery is an image gallery management system by the individual developer Md. Yamin Hossain of Bangladesh. A cross-site scripting vulnerability exists in imagegallery version 1.0, which stems from a cross-site scripting attack due to improper handling of the username parameter in the...

PT-2025-3940 · Unknown · 1000 Projects Campaign Management System Platform For Women

Name of the Vulnerable Software and Affected Versions: 1000 Projects Campaign Management System Platform for Women version 1.0 Description: A critical issue affects the 1000 Projects Campaign Management System Platform for Women, where the manipulation of the Username argument in the file...

Code-Projects Train Ticket Reservation System 安全漏洞

Code-Projects Train Ticket Reservation System is an open source train ticket reservation system from Code-Projects. A security vulnerability exists in Code-Projects Train Ticket Reservation System version 1.0, which stems from a stack-based buffer overflow due to the username parameter of the...

EDIMAX RE11S 安全漏洞

EDIMAX RE11S is a router from EDIMAX. A security vulnerability exists in EDIMAX RE11S v1.11, which stems from the discovery that the L2TPUserName parameter via /goform/setWAN contains a command injection vulnerability...

CVE-2025-0486

A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fladmin/login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploi...

PT-2025-3916 · Fanli2012 · Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file /fladmin/login.php. The manipulation of the username argument leads to SQL injection. This issue...

native-php-cms 安全漏洞

native-php-cms is a website builder system for FLi individual developers. A security vulnerability exists in native-php-cms version 1.0, which originates from the parameter username in the file /fladmin/login.php that can cause SQL injection...