12648 matches found
Fimer Aurora 安全漏洞
Fimer Aurora Vision is a scalable web-based power plant management platform from Fimer Italy. It is designed to enable customers to remotely manage solar plants in a variety of markets. A security vulnerability exists in Fimer Aurora that stems from a response to a failed login attempt revealing...
CVE-2020-23685
SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php...
CVE-2021-41232
Thunderdome is an open source agile planning poker tool in the theme of Battling for points. In affected versions there is an LDAP injection vulnerability which affects instances with LDAP authentication enabled. The provided username is not properly escaped. This issue has been patched in versio...
CVE-2020-23685
SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php...
Sql injection
SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php...
CVE-2020-23685
SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php...
Liaoning Vtime Technology 188Jianzhan SQL注入漏洞
Liaoning Vtime Technology 188Jianzhan is an open source website builder from Liaoning Vtime Technology. 188Jianzhan v2.1.0 is vulnerable to SQL injection. The vulnerability is caused by a lack of valid restrictions and escaping of the username parameter in login.php. An attacker could use this...
Thunderdome 注入漏洞
Thunderdome is an open source agile planning poker application with an interesting theme by Steven Weathers, an individual developer in the U.S. An injection vulnerability exists in Thunderdome, which stems from the LDAP authentication feature not properly escaping the provided username, and no...
PT-2021-10924 · Unknown · 188Jianzhan
Name of the Vulnerable Software and Affected Versions: 188Jianzhan version 2.1.0 Description: The issue allows attackers to execute arbitrary code and gain escalated privileges. This is achieved via the username parameter to the "login.php" endpoint. Recommendations: For 188Jianzhan version 2.1.0...
My Movie Collection Sinatra App - (Login) XSS Vulnerabilities
Document Title: =============== My Movie Collection Sinatra App - Login XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2293 Release Date: ============= 2021-11-01 Vulnerability Laboratory ID VL-ID: ==================================...
News Portal Project SQL Injection Vulnerability (CNVD-2021-102010)
News Portal Project is an open source news portal project . News Portal Project in version 3.1, there is a SQL injection vulnerability , the vulnerability stems from the application's category, subcategory, sucatdescription, username parameters lack of validation of external input SQL statements...
Alfresco Software Alfresco Community Edition 资源管理错误漏洞
Alfresco Community Edition is the U.S. Alfresco's set of open source enterprise content management system community edition. The system includes document management, office collaboration, and other features. A resource management error vulnerability exists in Alfresco Community Edition that stems...
Improper Access Control in jupyterhub-firstuseauthenticator
Impact When JupyterHub is used with FirstUseAuthenticator, the vulnerability allows unauthorized access to any user's account if createusers=True and the username is known or guessed. Patches Upgrade to jupyterhub-firstuseauthenticator to 1.0, or apply patch...
CVE-2021-41194
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if createusers=True and t...
PYSEC-2021-384
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if createusers=True and t...
CVE-2021-41194 Improper Access Control in jupyterhub-firstuseauthenticator
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if createusers=True and t...
CVE-2021-37808
SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the 1 category, 2 subcategory, 3 sucatdescription, and 4 username parameters, the server response is about N seconds delay respectively which mean it is vulnerable to MySQL Blind Time Based. An attacker can...
Sql injection
An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username in lognin.php...
CVE-2021-37803
CVE-2021-37803: A SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0, exploitable via the username parameter in login.php (lognin.php). The issue is exposed over network with no authentication required (per CVSS v3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H...