2464 matches found
CVE-2023-49547
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...
CVE-2023-49547
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...
Sql injection
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...
CVE-2023-49547
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...
CVE-2023-49547
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...
CVE-2024-2063
A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknown function of the file /admin/app/profilecrud.php. The manipulation of the argument username leads to cross site scripting. It is possible to launch the atta...
PT-2024-18688 · Sourcecodester · Sourcecodester Petrol Pump Management
Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /admin/app/profile crud.php. The manipulation of the username argument leads to...
Library System SQL Injection Vulnerability
Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters username/password can lead to sql injection...
Library System SQL Injection Vulnerability
Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters email/idno/phone/username can lead to sql injection...
Library System SQL Injection Vulnerability
Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters username and password can lead to SQL injection...
D-Link DIR-600M C1 Security Breach
The D-Link DIR-600M C1, among others, is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-600M C1 version 3.08, which stems from a buffer overflow caused by the parameter username in the component Telnet Service...
Library System SQL Injection Vulnerability
Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters email/regno/phone/username can lead to sql injection...
PHP MySQL User Signup Login System Cross-Site Scripting Vulnerability
The PHP MySQL User Signup Login System is a login and registration form using HTML, PHP and MySQL. A cross-site scripting vulnerability exists in PHP MySQL User Signup Login System version 1.0, which originates from a cross-site scripting vulnerability in the parameter username in the file...
CVE-2024-24133
Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...
CVE-2024-24133
Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...
Sql injection
Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...
PT-2024-20286 · Atmail · Atmail
Name of the Vulnerable Software and Affected Versions: Atmail version 6.6.0 Description: The issue is a SQL injection vulnerability that can be exploited via the username parameter on the login page. Recommendations: For Atmail version 6.6.0, avoid using the username parameter in the login page...
CVE-2024-24133
Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...
CVE-2024-24133
Affected software: Atmail v6.6.0. Vulnerability: SQL injection via the username parameter on the login page. Root cause: improper handling of the username input leading to SQL injection (high/critical impact). CVSSv3.1 metrics indicate: Network attack vector, no privileges required, user interact...