CVE-2022-2680

A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR SELECT 7064 FROMSELECT COUNT,CONCAT0x71627a7671,SELECT...

Sql injection

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument username with the input ' AND SELECT 4955 FROM SELECTSLEEP5RSzF AND 'htiy'='htiy leads to s...

PT-2022-18025 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Garage Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Garage Management System, allowing for SQL injection through the manipulation of the userName/uemail...

Church Management System SQL注入漏洞

Church Management System is a church management system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Church Management System, which stems from an unknown function in its login.php component that operates on a special string input for the parameter username, resulting...

PT-2022-18085 · Sourcecodester · Sourcecodester One Church Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Church Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection. This is achieved by manipulating the username argument in the /login.php file with a specifically crafted input...

SourceCodester Garage Management System SQL注入漏洞

SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It helps you manage all your vehicles, cars and motorcycles. An SQL injection vulnerability exists in SourceCodester Garage Management System, which stems from the parameter...

CLSA-2022-1659635964 Fixed CVE-2022-30550 in dovecot

CVE-2022-30550: fix handling passdbs with identical driver/args but different mechanisms/usernamefilter...

CLSA-2022-1659635856 Fixed CVE-2022-30550 in dovecot

CVE-2022-30550: fix handling passdbs with identical driver/args but different mechanisms/usernamefilter...

RUSTSEC-2022-0050 Interledger is Unmaintained

Interledger family of crates is not being actively maintained anymore. The owner of the published crate does not appear to be responsive. There is an outstanding concern around username comparison. This concern may or may not be resolved by bumping up the dependencies of the project...

Interledger is Unmaintained

Interledger family of crates is not being actively maintained anymore. The owner of the published crate does not appear to be responsive. There is an outstanding concern around username comparison. This concern may or may not be resolved by bumping up the dependencies of the project...

PT-2022-37421 · Unknown · Interledger

Name of the Vulnerable Software and Affected Versions: Interledger affected versions not specified Description: The Interledger family of crates is no longer actively maintained, and the owner of the published crate is unresponsive. There is a concern regarding username comparison, which may or m...

CVE-2022-2272

This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the login endpoint. When parsing the username element,...

CVE-2022-34530

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames...

CVE-2022-34530

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames...

CVE-2022-34530

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames...

CVE-2022-34530

CVE-2022-34530 affects Backdrop CMS v1.22.0. The issue lies in the login and password reset flow, allowing an attacker to enumerate usernames via password reset requests and receive distinct responses based on the username. The provided documents note a low confidentiality impact but do not speci...

CVE-2022-34530

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames...

Backdrop CMS 授权问题漏洞

Backdrop CMS is an open source content management system CMS. An authorization issue vulnerability exists in Backdrop CMS v1.22.0, which stems from a problem with the login and reset password functionality that allows an attacker to enumerate usernames via a password reset request and a different...

PT-2022-22191 · Unknown · Backdrop Cms

Name of the Vulnerable Software and Affected Versions: Backdrop CMS version 1.22.0 Description: An issue in the login and reset password functionality allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames. Recommendations: For...

Wavlink WN533A8 - Password Disclosure Vulnerability

Exploit Title: Wavlink WN533A8 - Password Disclosure Exploit Author: Ahmed Alroky Author Company : AIactive Version: M33A8.V5030.190716 Vendor home page : wavlink.com Authentication Required: No CVE : CVE-2022-34046 Tested on: Windows Exploit view-source:http://IPADDRESS/sysinit.shtml search for...