Codezips Online Shopping Portal SQL注入漏洞

Codezips Online Shopping Portal is a Codezips open source online store system. A SQL injection vulnerability exists in Codezips Online Shopping Portal version 1.0, which stems from an incorrect operation of the username parameter that can lead to sql injection...

PT-2024-39575 · Unknown · Phpgurukul Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal version 2.0 Description: A critical vulnerability was found in the Admin Panel component of the PHPGurukul Online Shopping Portal, specifically affecting the file /shopping/admin/index.php. The manipulation o...

Online Shopping Portal SQL注入漏洞

Online Shopping Portal is an open source online shopping portal from the individual developer Anuj Kumar. A SQL injection vulnerability exists in Online Shopping Portal version 2.0, which originates from an SQL injection issue in the username parameter of the /shopping/admin/index.php page of the...

SourceCodester Kortex Lite Advocate Office Management System SQL注入漏洞

SourceCodester Kortex Lite Advocate Office Management System is an office management system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which originates from an SQL injection issue contained in the...

PT-2024-39549 · Unknown · Dingfanzu Cms

Name of the Vulnerable Software and Affected Versions: dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c Description: A critical issue has been found in the software, affecting some unknown functionality of the file saveNewPwd.php. The manipulation of the username argument leads to sql...

FlatPress 安全漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. A security vulnerability exists in FlatPress v1.3, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML by injecting a...

dingfanzu CMS SQL注入漏洞

dingfanzu CMS is is a Chinese Content Management System CMS that is designed to help users easily manage and publish digital content. An SQL injection vulnerability exists in dingfanzu CMS, which originates from an SQL injection in the parameter username...

PT-2024-20926 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: Flatpress version 1.3 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter in the "setup.php" endpoint. Recommendations: For Flatpre...

CVE-2024-9034

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploi...

Code-Projects Blood Bank Management System SQL注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. A SQL injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which originates from a SQL injection vulnerability in the username/password parameters in the...

PT-2024-39378 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue was found in the Patient Record Management System, affecting some unknown functionality of the file login.php. The manipulation of the username argument...

Code-Projects Patient Record Management System SQL注入漏洞

Code-Projects Patient Record Management System is a Code-Projects open source patient record management system. A SQL injection vulnerability exists in Code-Projects Patient Record Management System version 1.0, which originates from the username parameter in the login.php file containing a SQL...

CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

Inventio Lite SQL注入漏洞

Inventio Lite is a general purpose inventory and sales system. A security vulnerability exists in Inventio Lite v4 and prior versions that stems from vulnerability to SQL injection attacks via the username parameter in /?action=processlogin...

CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

CVE-2024-44541

Inventio Lite v4 and earlier is vulnerable to SQL Injection via the username parameter in /?action=processlogin. The issue arises from building an SQL query with user-supplied input (email/username) and password without proper parameter binding, enabling bypass of authentication and potential dat...

Hospital Management System user-login.php File SQL Injection Vulnerability

Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from an unknown function in the file user-login.php, where manipulation of the parameter username can lead to SQL injection. An attacker can use this...

CVE-2024-8569

A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file user-login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely...

Hospital Management System SQL注入漏洞

Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from an unknown function in the file user-login.php, where manipulation of the parameter username can lead to SQL injection. An attacker can use this...