CVE-2024-10699 code-projects Wazifa System logincontrol.php sql injection

A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2024-10699: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

PT-2024-16473 · Unknown · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A critical issue was found in the code-projects Wazifa System, affecting an unknown part of the file /controllers/logincontrol.php. The manipulation of the username argument leads to SQL...

Code-Projects Wazifa System SQL注入漏洞

Wazifa System is a content management system. Wazifa System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter username in the file /controllers/logincontrol.php. An attacker can use this vulnerability to...