CVE-2022-27983: Undefined Security Weakness

RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php...

PT-2022-18733

Name of the Vulnerable Software and Affected Versions RG-NBR-E Enterprise Gateway RG-NBR2100G-E affected versions not specified Description The issue is related to an arbitrary file read vulnerability. This vulnerability can be exploited via the url parameter in the check.php file. Recommendation...

PT-2021-10126

Name of the Vulnerable Software and Affected Versions: SEMCMS version 3.8 Description: A vulnerability in the "/include/web check.php" file allows attackers to reset the Administrator account's password. Recommendations: For SEMCMS version 3.8, consider disabling access to the "/include/web...

PT-2021-19410

Name of the Vulnerable Software and Affected Versions SIS SIS-REWE Go versions prior to 7.7 SP17 Description The issue allows for XSS attacks. It affects the 'rewe/prod/web/index.php' endpoint, with vulnerable parameters being config, version, win, db, pwd, and user. Additionally, the...

CVE-2020-28938

OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...

CVE-2020-28938

OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...

Cross site scripting

OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...

CVE-2020-28938

OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...

CVE-2020-28938

OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...

OpenClinic Cross-Site Scripting Vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management. A cross-site scripting vulnerability exists in OpenClinic version 0.8.2, which stems from the effects of an XSS vulnerability stored in...

CVE-2020-28938: Improper Neutralization of Input During Web Page Generation

OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...

PT-2020-17064

Name of the Vulnerable Software and Affected Versions OpenClinic version 0.8.2 Description The issue is a stored XSS vulnerability in lib/Check.php, allowing users to force actions on behalf of other users. Recommendations For OpenClinic version 0.8.2, consider restricting access to the...

PT-2019-9460

Name of the Vulnerable Software and Affected Versions Twilio WEB To Fax Machine System version 1.0 Description The issue exists due to SQL Injection in the Twilio WEB To Fax Machine System. This can be exploited via the email or password parameter to "login check.php", or the id parameter to "add...

CVE-2018-20609

imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...

CVE-2018-20609

imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...

PT-2018-15473

Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows remote attackers to obtain potentially sensitive configuration information. This is achieved via the "root/tools/adbug/check.php" API endpoint. Recommendations For imcat version 4.4, consider...

CVE-2018-20609: Exposure of Sensitive Information to an Unauthorized Actor

imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...

PT-2018-15408

Name of the Vulnerable Software and Affected Versions MetInfo versions 6.x through 6.1.3 Description The issue allows for XSS via the "/admin/login/login check.php" API endpoint, specifically through the url array parameter. Recommendations For MetInfo versions 6.x through 6.1.3, avoid using the...

Sql injection

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

PT-2018-13916

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description The issue is related to a SQL Injection vulnerability. This vulnerability can be exploited via the Client-Ip HTTP header in the /user/check.php API endpoint. Recommendations For zzcms version 8.3, consider...