https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:52:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349620 EUVD-2026-349620 https://cve.radiocsirt.org/vuln/euvd-2026-349620 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71207 <p>The Stock-Inventory-Management-System application&#39;s login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.</p> <p>The Stock-Inventory-Management-System application&#39;s login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71207 https://cve.radiocsirt.org/vuln/ghsa-8924-6725-h379 <p>The Stock-Inventory-Management-System application&#39;s login.php assigns raw $_POST username/password values to $_SESSION and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. An unauthenticated remote attacker can submit a payload such as &#39; OR &#39;1&#39;=&#39;1 in the login form to bypass authentication entirely. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.</p> <p>The Stock-Inventory-Management-System application&#39;s login.php assigns raw $_POST username/password values to $_SESSION and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. An unauthenticated remote attacker can submit a payload such as &#39; OR &#39;1&#39;=&#39;1 in the login form to bypass authentication entirely. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.</p> https://cve.radiocsirt.org/vuln/ghsa-8924-6725-h379