CVE-2025-65349: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at...

Cross site scripting

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm...

CVE-2023-4523: Improper Neutralization of Input During Web Page Generation

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm...

PT-2020-12682

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor versions prior to 20.1.57.1745 Description The issue allows remote unauthenticated attackers to obtain sensitive information about the server, including CPU usage, memory, Windows version, and internal statistics, by sendi...

PT-2020-10468

Name of the Vulnerable Software and Affected Versions NETGEAR WNR1000V4 version 1.1.0.54 Description An issue was discovered where multiple pages within the web management console, specifically setup.cgi and adv index.htm, are vulnerable to stored XSS. This is demonstrated by the configuration of...

PT-2019-15668

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 9.5 Description The issue allows for cross-site scripting XSS in the target/locales/tr-TR/help/index.htm endpoint via the fileName parameter. This could potentially lead to malicious script execution...

CVE-2019-18793: Improper Neutralization of Input During Web Page Generation

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...

CVE-2015-8298: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow remote attackers to execute arbitrary SQL commands via the 1 loginpassword, 2 loginusername, 3 zusatzlicher, or 4 groupid parameter to index.htm, or the 5 rxtec cookie to index.htm...

PT-2018-4439

Name of the Vulnerable Software and Affected Versions RXTEC RXAdmin UPDATE 06 / 2012 Description The issue concerns SQL injection vulnerabilities in the login page. Remote attackers can execute arbitrary SQL commands by manipulating specific parameters to the index.htm page, including the...

PT-2017-7538

Name of the Vulnerable Software and Affected Versions Proxmox Mail Gateway versions prior to 4.0-8-097d26a9 Description The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via multiple parameters. The affected API...

CVE-2015-9057: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...

CVE-2014-2325: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the 1 state parameter to objects/who/index.htm or 2 User email address to quarantine/spam/manage.htm...

PT-2014-4625

Name of the Vulnerable Software and Affected Versions Proxmox Mail Gateway versions prior to 3.1-5829 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the state parameter to the "objects/who/index.htm" endpoint or the User email addres...

VMware Products Security Bypass Vulnerability (VMSA-2010-0014) - Windows

VMWare products are prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3277: Undefined Security Weakness

The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file...

VMware Workstation, Player, and ACE address several security issues.

a. VMware Workstation and Player installer security issueThe Workstation 7.x and Player 3.x installers will load an index.htm file located in the current working directory on which Workstation 7.x or Player 3.x is being installed. This may allow an attacker to display a malicious file if they...

VMSA-2010-0014:VMware Workstation, Player, and ACE address several security issues.

VMSA-2010-0014.1 VMware Workstation, Player, and ACE address several security issues. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0014.1 VMware Security Advisory Synopsis: VMware Workstation, Player, and ACE address several security issues. VMware Security Advisory...

CVE-2006-5534

CVE-2006-5534 affects Zwahlen Online Shop Freeware, likely up to version 5.2.2.50, with multiple XSS flaws in index.htm. The vulnerability allows remote attackers to inject arbitrary web script or HTML via parameters (cat, Kat, id, or no parameters). The root cause is unvalidated input in index.h...

CVE-2006-5534: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.htm in Zwahlen Online Shop Freeware 5.2.2.50, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cat, 2 Kat, 3 id, or 4 no parameters. NOTE: some of these details are obtained from third party...

CVE-2001-1117: Undefined Security Weakness

LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for 1 index.htm and 2 Password.htm...